Sr. Security Engineer, Insider Threat Detection & Response

Ektello; San Francisco (CA); Remote; USD 138.000 - 207.000; Vollzeit

Zusammenfassung

Ektello is seeking a Sr. Security Engineer focused on Insider Threat Detection & Response. This fully remote role involves building and scaling insider threat detection capabilities, automating detections, and driving incident response readiness across the organization.

Responsibilities include threat hunting, creating detection models, and collaborating with HR, Legal, and Privacy to manage sensitive internal cases while maintaining security posture in a fast-growing environment.

Qualifikationen

• 5+ years in security operations: detection, threat hunting, IR, forensics, or threat intel.
• Bachelor’s degree in CS, InfoSec, or related field (or equivalent).
• Deep experience with insider threat tech: DLP, UEBA, UAM.
• Familiarity with MITRE ATT&CK and cyber kill chain.
• Automate security detection and response with code (Python/SQL).

Aufgaben

• Detection Engineering & Visibility: identify coverage gaps; onboard logging; build scalable detections for data abuse and exfiltration.
• Threat Hunting & Analytics: use data analytics to hunt for insider threats and policy violations at scale.
• Automation & Modeling: build automation pipelines, detection models, and UEBA logic.
• Complex Investigations & Partnerships: technical investigations with engineering; work with HR, Legal, Privacy on sensitive cases.
• Countermeasure & Strategy Design: design security controls and risk mitigation for high-risk internal access.
• Incident Response & On-Call: participate in 24/7 on-call rotations for incidents.
• Security Culture & Awareness: contribute technical context to security awareness messaging.

Kenntnisse

Threat detection

Threat hunting

Incident response

Code automation

Communication

Ausbildung

Bachelor's degree in CS/InfoSec or related field

Tools

DLP

UEBA

UAM

AWS

Jobbeschreibung

Sr. Security Engineer, Insider Threat Detection & Response

Location: Fully Remote

12 + month contract to (hire + multi-extension capability) Rate: 100 - 150 /hr.

About the Role

The Threat Detection and Response (TDR) team is focused on automating security detection, responding to security incidents, and collaborating with partner teams to build capabilities supporting the complete incident response lifecycle. As the front line protecting our data, systems, and infrastructure, TDR detects, investigates, and responds to active security threats and malicious activity. To expand our coverage and protect our platform, we are building a mature, world-class Insider Threat Program. As a Sr. Security Engineer, Insider Threat Detection & Response, you will play a pivotal role in implementing and executing our strategic vision. You will drive direct impact by leveraging both technical contributions and cross-functional influence to design, deploy, and scale advanced insider threat detection capabilities.

Key Responsibilities

• Detection Engineering & Visibility: Identify coverage gaps across corporate and production environments; partner with business and technical teams to onboard logging and build scalable detections for data abuse and exfiltration.
• Threat Hunting & Analytics: Utilize coding, data analytics, and investigative techniques to proactively hunt for insider threats, anomalous activity, and policy violations at scale.
• Automation & Modeling: Build automation pipelines, detection models, and User & Entity Behavior Analytics (UEBA) logic to accelerate identification and mitigate insider threats with speed and precision.
• Complex Investigations & Partnerships: Conduct technical investigations side-by-side with engineering, and work closely with Human Resources, Legal, and Privacy teams on sensitive internal cases.
• Countermeasure & Strategy Design: Consult on system architecture to recommend and help design security controls, countermeasures, and risk mitigation strategies for high-risk internal access.
• Incident Response & On-Call: Participate in 24/7 on-call rotations for threat detection and incident response, providing technical expertise during active insider threat incidents.
• Security Culture & Awareness: Partner with key stakeholders to contribute technical context to company-wide Security Awareness messaging, training, and policy development.

Qualifications & Skills

Minimum Requirements

• 5+ years of hands-on experience in security operations, including detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.
• Bachelor’s degree in Computer Science, Information Security, or a related technical field (or equivalent practical experience).
• Deep technical experience with Insider Threat technologies, including Data Loss Prevention (DLP) solutions, User and Entity Behavior Analytics (UEBA), and User Activity Monitoring (UAM).
• Strong foundational understanding of the relationship between insider threats and the broader Incident Response lifecycle, including cross-functional incident orchestration.
• Practical familiarity with industry frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain) and how they map to insider threat tactics, techniques, and procedures (TTPs).
• Proven experience automating security detection and response workflows using code (Python, SQL, or similar).
• Exposure to data science, behavioral modeling, or analytics solutions applied to insider threat detection.

Preferred Qualifications

• Experience with cloud platforms and services (AWS: EC2, S3, Lambda, RDS, GuardDuty, CloudTrail).
• Mid-level to advanced understanding of insider threat dynamics within high-growth B2C / Tech environments.

Soft Skills & Professional Qualities

• Calm Under Pressure: Ability to navigate critical, high-stress security incidents with composure, speed, and sound technical judgment.
• Self-Motivated: Strong problem-solver capable of driving initiatives independently with minimal guidance.
• Communication & Discretion: Exceptional organizational, prioritization, and communication skills suitable for collaborating with legal, HR, and executive leadership.