Senior Insider Threat Security Engineer — Remote

Embedded Shishya; United States; Remote; USD 110,000 - 269,000; Full time

Job summary

Chainlink Labs is seeking a Senior Security Engineer to lead the Insider Trust Team’s detection and investigation efforts in a remote-first environment. You will architect and automate end-to-end investigations, develop Sigma-based detection rules, and collaborate with Threat Management, People, Legal, IT, and Engineering to support insider investigations.

Requirements include 7+ years in insider threat, macOS forensics, cloud infrastructure experience, and strong integrity and communication

Qualifications

• 7+ years of experience conducting technical investigations and working in an Insider Threat capacity. Senior candidates preferred.
• Deep experience in macOS focused environments, including log collection, log analysis, digital investigations, and forensics.
• Knowledge of Insider Threat tactics and attack paths, data exfiltration techniques, and experience running and leading insider incidents independently and as part of a team.
• Broad familiarity with Insider Threat investigations of modern cloud infrastructure.
• Strong critical thinking skills, as well as integrity, objectivity, and maturity.

Responsibilities

• Own and lead building out the Insider Trust Team’s infrastructure to engineer and automate end-to-end detection and investigation workflows.
• Develop, measure, and tune detection rules in Sigma to ensure effective and sustainable operations.
• Drive projects with a focus on Insider Risks, ranging from access abuse and intellectual property theft, to novel risks emerging within the blockchain/Web3 space.
• Work closely with cross-functional teams, including Threat Management, People, Legal, IT, and Engineering, and provide technical expertise and evidence to lead insider investigations.
• Assist in conducting sensitive interviews during insider threat investigations, bringing your technical subject matter expertise to support fact finding.
• Proactively identify and implement areas of improvement and modernization.

Skills

Insider Threat

macOS forensics

Cloud security

Investigation

Python scripting

Job description

Chainlink Labs is seeking a Senior Security Engineer to lead the Insider Trust Team’s detection and investigation efforts in a remote-first environment. You will architect and automate end-to-end investigations, develop Sigma-based detection rules, and collaborate with Threat Management, People, Legal, IT, and Engineering to support insider investigations.

Requirements include 7+ years in insider threat, macOS forensics, cloud infrastructure experience, and strong integrity and communication