Senior Insider Threat Analyst — Hybrid/Flex Work

Workday; Reston (VA); Hybrid; USD 152,000 - 228,000; Full time

Benefits offered by this job

Flex Work

Stock grants

Job summary

Workday seeks an Insider Threat Analyst to identify and mitigate insider risks using advanced security analytics. You will lead detection development, triage alerts, and partner with Legal, HR, and Cyber teams to ensure actionable outcomes.

You will translate investigations into improved detection logic while guiding threat hunting initiatives and ensuring alert fidelity across the security stack.

Qualifications

• 8+ years of experience in Insider Threat, Security operations, Threat Hunting, Intelligence analysis, corporate investigations or counterintelligence.
• Experience mapping detections to MITRE ATT&CK and other Insider threat knowledge bases.
• Experience designing, tuning, and operationalizing detection logic in security tools such as UEBA and DLP solutions.
• Experience implementing automation or orchestration in security operations (SOAR, APIs, pipelines).

Responsibilities

• Design, build, and refine insider threat detection logic and analytics to improve signal quality.
• Lead triage and investigation of insider threat alerts and translate findings into detection improvements.
• Develop scalable detection strategy and use cases to cover data exfiltration, employee exit risk, and misuse.
• Conduct proactive threat hunting using behavioral, endpoint, and data activity signals.
• Collaborate with Data Protection, Legal, HR, and Cyber teams to align detections with business needs.

Skills

Insider Threat

Security operations

Threat Hunting

Intelligence analysis

Corporate investigations

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Security

Tools

Proofpoint

DTEX

Exabeam

Netskope

UEBA

DLP tools

Job description

Workday seeks an Insider Threat Analyst to identify and mitigate insider risks using advanced security analytics. You will lead detection development, triage alerts, and partner with Legal, HR, and Cyber teams to ensure actionable outcomes.

You will translate investigations into improved detection logic while guiding threat hunting initiatives and ensuring alert fidelity across the security stack.