Senior Insider Threat Hunter & Detection Architect

Workday; Boulder (CO); Hybrid; USD 152,000 - 228,000; Full time

Benefits offered by this job

Flex Work option

Job summary

Workday seeks an experienced Insider Threat Analyst to help identify, analyze, and mitigate insider risks using advanced security tools and analytics. You will collaborate across teams to assess risks, detect anomalies, and strengthen the organization's security posture.

You will design detection logic, lead investigations, and translate outcomes into improvements, while partnering with Legal, HR, and Cyber teams to ensure risk-aligned, actionable detections.

Qualifications

• 8+ years of insider threat, security operations, threat hunting, or related experience.
• Experience analyzing data/telemetry to identify insider risk in UEBA, DLP, and SIEM.
• Ability to map detections to MITRE ATT&CK and related frameworks.
• Experience designing and tuning detection logic to reduce noise.
• Strong collaboration and leadership when working with cross-functional teams.

Responsibilities

• Design, tune, and operationalize insider threat detection logic and analytics.
• Lead alert triage and investigations, translating findings into detection improvements.
• Develop scalable detection strategy aligned to insider threat risks.
• Conduct proactive threat hunting using behavioral and endpoint signals.
• Partner with Data Protection, Legal, HR, and Cyber teams to ensure actionable detections.

Skills

Insider Threat

Security Operations

Threat Hunting

Behavioral Analytics

Data Analysis

Team Collaboration

MITRE ATT&CK

Education

Bachelor’s degree in Computer Science/Cybersecurity or related field

Tools

Proofpoint

DTEX

Exabeam

Netskope

Job description

Workday seeks an experienced Insider Threat Analyst to help identify, analyze, and mitigate insider risks using advanced security tools and analytics. You will collaborate across teams to assess risks, detect anomalies, and strengthen the organization's security posture.

You will design detection logic, lead investigations, and translate outcomes into improvements, while partnering with Legal, HR, and Cyber teams to ensure risk-aligned, actionable detections.