Senior Insider Threat Detection Engineer

The Charles Schwab Corporation; California (MO); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(k) with company match

Paid time off

Sabbatical every 5 years

Parental leave and family benefits

Tuition reimbursement

Health, dental, and vision insurance

Job summary

The Charles Schwab Corporation is seeking a Threat Detection & Monitoring professional to monitor insider threat tools, triage alerts, and lead investigations. You will analyze data, document findings, and support incident response across HR, Legal, and Risk teams.

Ideal candidates have 2–5+ years in cybersecurity, experience with SIEM/UEBA/DLP/EDR, and strong communication. This role emphasizes collaboration, analytics, and ongoing improvement of detection capabilities.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field (or equivalent experience).
• 2–5+ years of experience in cybersecurity or insider threat.
• Experience with SIEM, UEBA, DLP, or EDR tools.
• Strong analytical and data interpretation skills.
• Knowledge of networking concepts and threat actor techniques.
• Experience with alert triage, incident investigations, and case management.
• Familiarity with behavioral analytics and detection methodologies.
• Experience working cross-functionally with HR, Legal, or Risk teams.
• Strong written and verbal communication skills, including executive-ready reporting.

Responsibilities

• Monitor insider threat tools (UEBA, SIEM, DLP, EDR) to identify anomalous or suspicious user activity.
• Triage and prioritize alerts, correlating data from multiple sources to determine risk and required action.
• Identify trends and behavioral patterns indicative of insider risk activity.
• Conduct thorough investigations into potential insider threats.
• Collect, analyze, and interpret data to develop actionable findings.
• Document investigations with clear evidence and timelines.
• Support the full lifecycle of insider threat incidents.
• Execute response playbooks and contribute to post-incident reviews.
• Escalate high-risk findings in accordance with policy.
• Refine and optimize detection rules and alerts.
• Support development of new detection use cases.
• Partner with engineering teams to enhance analytics.
• Partner with HR, Legal, and Security teams.
• Communicate findings to technical and non-technical stakeholders.
• Serve as liaison for insider threat escalations.
• Prepare reports and summaries on insider threat activity.
• Provide recommendations to improve security posture.
• Maintain accurate case documentation.
• Contribute to playbooks, SOPs, and workflows.
• Identify gaps and recommend improvements.
• Support program maturity initiatives.

Skills

SIEM

UEBA

DLP

EDR

Analytical skills

Networking concepts

Education

Bachelor's degree in Cybersecurity, IT, or related field

Job description

The Charles Schwab Corporation is seeking a Threat Detection & Monitoring professional to monitor insider threat tools, triage alerts, and lead investigations. You will analyze data, document findings, and support incident response across HR, Legal, and Risk teams.

Ideal candidates have 2–5+ years in cybersecurity, experience with SIEM/UEBA/DLP/EDR, and strong communication. This role emphasizes collaboration, analytics, and ongoing improvement of detection capabilities.