Senior Insider Threat Analyst (Remote/Flexible)

Workday; Boulder (CO); Hybrid; USD 152,000 - 228,000; Full time

Job summary

Workday is seeking an Insider Threat Analyst to support a dynamic environment. You will identify, analyze, and mitigate insider risks using advanced security tools, behavioral analytics, and investigative techniques in a Colorado-based role.

You will collaborate with cross-functional teams to assess risks, detect anomalies, and enhance the organization’s insider threat posture, focusing on removal of noise and improving alert fidelity.

Qualifications

• 8+ years in Insider Threat, Security operations, Threat Hunting, Intelligence analysis, or related fields.
• Experience with corporate investigations or counterintelligence environments.
• Proven ability to design, tune, and operationalize detection logic and policies.

Responsibilities

• Design, tune, and optimize insider threat detection logic, reducing false positives.
• Lead alert triage and investigations, translating outcomes into improved detections.
• Develop scalable detection strategy aligned to insider risk (data exfiltration, exit risk, misuse).
• Conduct proactive threat hunting using behavioral, endpoint, and data signals.
• Partner with Data Protection, Legal, HR, and Cyber teams to ensure risk-aligned detections.

Skills

Insider Threat

Security operations

Threat Hunting

Intelligence analysis

Corporate investigations

Counterintelligence

UEBA

DLP tools

Threat detection

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related field

Tools

Proofpoint

DTEX

Exabeam

Netskope

SIEM

Security Orchestration (SOAR)

Job description

Workday is seeking an Insider Threat Analyst to support a dynamic environment. You will identify, analyze, and mitigate insider risks using advanced security tools, behavioral analytics, and investigative techniques in a Colorado-based role.

You will collaborate with cross-functional teams to assess risks, detect anomalies, and enhance the organization’s insider threat posture, focusing on removal of noise and improving alert fidelity.