Remote Senior Insider Threat Engineer — Build & Detect

Remote; San Francisco (CA); A distancia; USD 109.000 - 151.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health coverage

Tech stipends

Paid time off

Equity rewards

Descripción de la vacante

affirm is seeking an experienced insider threat lead to mature our insider risk program. You will design controls, create detection use cases, and drive investigations with Legal, HR, Privacy, and Compliance to ensure balance between privacy and risk management.

You will build operating mechanics, develop playbooks, and establish metrics to show program effectiveness, partnering with engineering teams to implement automated detections and workflows.

Formación

• Expertise in security engineering and insider risk or digital forensics.
• Experience building security capabilities with limited existing foundations.
• Experience leading investigations end-to-end with evidence handling and reporting.

Responsabilidades

• Lead insider threat workstreams from design to daily operations.
• Develop investigative standards, playbooks, and metrics.
• Support risk investigations with telemetry and written findings.
• Collaborate with Legal, HR, Privacy, and Compliance on case handling.
• Model data and turn results into production detections.
• Improve controls: DLP, endpoint monitoring, access governance.

Conocimientos

Security engineering

Insider risk

Incident investigations

Telemetry and evidence analysis

Python for security tooling

Written communication

Privacy and compliance

End-to-end investigations

Educación

Security/compliance related degree

Herramientas

Splunk

Elastic

Panther

Chronicle

DLP

UEBA

EDR

CASB

Descripción del empleo

affirm is seeking an experienced insider threat lead to mature our insider risk program. You will design controls, create detection use cases, and drive investigations with Legal, HR, Privacy, and Compliance to ensure balance between privacy and risk management.

You will build operating mechanics, develop playbooks, and establish metrics to show program effectiveness, partnering with engineering teams to implement automated detections and workflows.