Senior Security Engineer - Insider Threat

Citizens Financial Group

Johnston (RI)

Hybrid

USD 114,000 - 152,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Competitive pay

Medical, dental, and vision coverage

Retirement benefits

Maternity/paternity leave

Flexible work arrangements

Education reimbursement

Wellness programs

Paid time off

Job summary

Citizens Financial Group is seeking a Senior Security Engineer focused on Insider Threat in Johnston, RI. This hybrid role includes advancing the Insider Threat Program, building detection logic, and partnering with internal stakeholders to improve insider risk identification and response.

Responsibilities include maturing capabilities, analyzing telemetry, and collaborating with cross-functional teams to operationalize insider risk processes.

Qualifications

Bachelor’s degree in Information Security, Computer Science, or a related field with 1+ years of relevant experience
High school diploma or equivalent with 5+ years of relevant professional experience may be considered in lieu of a bachelor’s degree
Understanding of insider threat concepts, data protection, and regulatory considerations

Responsibilities

Assess Insider Threat Program capabilities, identify gaps, and develop indicators to improve detection
Develop analytics, detection logic, and reporting to identify risky colleague activity
Evaluate and optimize security technologies for insider threat monitoring and response
Analyze security telemetry to detect anomalous activity and potential insider risk
Collaborate with Cybersecurity, HR, Legal, Risk, and Technology teams to operationalize insider risk controls
Create and maintain insider threat and fraud detection reporting

Skills

Insider threat

Security analytics

Threat detection

Data analysis

Communication

Cross-functional collaboration

Education

Bachelor’s degree in Information Security, Computer Science, or related field

High school diploma with 5+ years experience in lieu of degree

Tools

Microsoft Office

Job description

Citizens Financial Group is seeking a Senior Security Engineer focused on Insider Threat. In this hybrid role in Johnston, RI, you will help mature the organization’s Insider Threat Program by building detection logic, analyzing security and behavioral telemetry, and partnering with internal stakeholders to improve insider risk identification and response.

Location and Work Arrangement

Location: Johnston, RI (hybrid)
Work arrangement: Hybrid with 4 days onsite and 1 day remote in one of the approved hubs: Johnston, RI | Boston, MA | Marlton, NJ | Pittsburgh, PA | Phoenix, AZ | Irving, TX | Cleveland, OH
Remote approval: Remote work requires executive approval
Schedule: Monday through Friday, 8:00 AM to 5:00 PM
Hours: 40 hours per week

Salary and Incentives

Base salary range: USD 114,000 - 152,000 per year
Incentive opportunity: Opportunity to earn additional incentive earnings
Pay determination: Actual pay is based on factors including budget, work location, and relevant skills and experience

Role Summary

This position advances insider threat capabilities through security analytics, behavioral indicators, data analysis, and technology-enabled controls. The role includes assessing current program capabilities, developing detection logic and indicators, and collaborating across teams to operationalize insider risk processes and controls.

Responsibilities

Assess existing Insider Threat Program capabilities, identify gaps, and develop technical and non-technical indicators to improve insider risk detection
Develop and enhance analytics, detection logic, behavioral indicators, and reporting used to identify potentially risky colleague activity
Evaluate, implement, configure, and optimize security technologies supporting insider threat monitoring, investigation, and response
Analyze data and security telemetry from multiple sources to identify anomalous activity, behavioral patterns, and potential insider risk
Use user and entity behavior analytics, security monitoring, threat intelligence, and related analytic methods to identify suspicious or abnormal activity
Investigate complex patterns of user activity and distinguish potentially malicious or high-risk behavior from expected business activity
Partner across Cybersecurity, Fraud, Human Resources, Legal, Risk, Technology, and other internal teams to develop and operationalize insider risk processes and controls
Collaborate with internal technology teams to ensure enterprise platforms and colleague-facing tools provide appropriate data and telemetry to support insider threat and fraud detection
Create, maintain, and enhance insider threat and fraud detection reporting using internal and external data sources
Interpret results from security and fraud analytics to identify and elevate potential incidents involving insider threats, internal fraud, theft, data misuse, or misconduct
Apply statistical and analytical techniques to improve anomaly detection, alert quality, detection accuracy, and investigative effectiveness
Identify opportunities to reduce false positives and improve signal quality of insider threat detections
Develop and maintain technical documentation, including detection methodologies, procedures, metrics, and program reporting
Produce program metrics and insights on insider risk trends, control effectiveness, detection coverage, and areas needing additional focus
Monitor evolving cyber threats, insider threat techniques, behavioral indicators, and emerging technologies that may affect the organization’s risk profile
Communicate technical findings, emerging threats, and recommended actions to cybersecurity teams and business stakeholders

Required Qualifications

Bachelor’s degree in Information Security, Computer Science, or a related field with 1+ years of relevant experience, or equivalent professional experience
High school diploma or equivalent with 5+ years of relevant professional experience may be considered in lieu of a bachelor’s degree
Understanding of information security concepts, cybersecurity practices, and regulatory considerations related to insider threat and data protection
Understanding of enterprise security and networking technologies and their role in prevention, detection, investigation, and response for insider threats
Experience analyzing security, behavioral, fraud, or related data to identify suspicious activity, anomalies, or potential risk
Ability to analyze information from multiple data sources and translate findings into actionable security insights
Strong analytical, investigative, and problem-solving skills
Advanced proficiency with Microsoft Office: Outlook, Word, Excel, and PowerPoint
Excellent verbal and written communication skills, including the ability to explain complex concepts to technical and non-technical stakeholders
Ability to work independently while collaborating effectively across technical and business teams

Tools and Technologies

Microsoft Office (Outlook, Word, Excel, PowerPoint)

Benefits

Competitive pay
Comprehensive medical, dental and vision coverage
Retirement benefits
Maternity/paternity leave
Flexible work arrangements
Education reimbursement
Wellness programs
Paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States

Background Check

Any offer of employment is conditioned on successfully passing a background check. This may include an initial credit check, motor vehicle record, public record, prior employment verification, and criminal background checks. Results are reviewed individually based on applicable legal requirements, considering the nature and severity of the background history and the job offered. Additional information will be provided as part of the offer process.

Awards and Recognition