Senior Insider Threat Analyst | Remote & Flexible

Workday; Atlanta (GA); Hybrid; USD 144,000 - 258,000; Full time

Job summary

Workday is seeking an experienced Insider Threat Analyst to support a dynamic security program in Atlanta, GA. You will identify, analyze, and mitigate insider risks using advanced analytics and investigative techniques, collaborating with cross-functional teams to strengthen detection postures.

You will design and tune detection logic, lead alert triage, and drive improvements across detection use cases. This role emphasizes proactive threat hunting and partnership with legal, HR, and data

Qualifications

• 8+ years of experience in Insider Threat, Security operations, Threat Hunting, Intelligence analysis, corporate investigations, or counterintelligence.
• Threat hunting experience in a corporate or government environment.
• Hands-on experience designing, tuning, and operationalizing detection logic in tools such as Proofpoint, DTEX, Exabeam, Netskope, or similar UEBA/DLP tools.
• Experience working with data/telemetry to identify insider risk in DLP UEBA, UAM, SIEM.
• Experience developing program metrics and presenting findings to senior leadership.

Responsibilities

• Design, build, and refine insider threat detection logic and analytics to reduce false positives and improve actionable alerts.
• Lead triage and investigation of insider threat alerts translating outcomes into detector improvements.
• Develop scalable detection strategy aligned to insider threat risks like data exfiltration and misuse.
• Conduct proactive threat hunting using behavioral, endpoint, and data signals to identify risks.
• Partner with Data Protection, Legal, HR, and Cyber teams to ensure detections are actionable and risk-aligned.

Job description

Workday is seeking an experienced Insider Threat Analyst to support a dynamic security program in Atlanta, GA. You will identify, analyze, and mitigate insider risks using advanced analytics and investigative techniques, collaborating with cross-functional teams to strengthen detection postures.

You will design and tune detection logic, lead alert triage, and drive improvements across detection use cases. This role emphasizes proactive threat hunting and partnership with legal, HR, and data