The posting
About the Role
We are seeking a Senior Security Engineer to help build and mature an insider threat detection and response program from the ground up. You will join a front-line security team that detects, investigates, and responds to threats against company data, systems, and infrastructure. In this role, you will shape detection capabilities through hands-on technical work and cross-functional influence, with direct impact on how the organization protects its most sensitive information.
Key Responsibilities
- Identify visibility gaps across infrastructure and partner with business teams to close them through improved logging and detection.
- Design and write detections for data misuse and data exfiltration at scale.
- Build automation and detection models that surface anomalous activity and speed up response.
- Proactively hunt for insider threats across corporate and production environments.
- Partner with engineering teams to develop advanced detection solutions, and work closely with Human Resources and Legal on complex investigations.
- Recommend and help design countermeasures that reduce insider risk.
- Take part in incident response and provide subject-matter expertise during insider threat incidents.
- Participate in an on-call rotation that supports 24/7 detection and response coverage.
- Contribute to security awareness messaging and training.
Qualifications
Required
- 5+ years of hands-on experience in security operations, such as detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.
- Bachelor’s degree in a related technical field, or equivalent practical experience.
- Experience with insider threat technologies, such as Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).
- Exposure to data science and analytics approaches that apply to insider threat detection.
- Experience automating security detection and response.
- Solid understanding of how insider threat and incident response connect, including how to coordinate responses to insider incidents.
- Working knowledge of insider threat challenges at consumer-facing companies.
- Familiarity with the Cyber Kill Chain and MITRE ATT&CK frameworks and how they apply to insider threats.
- Self-motivated, creative problem-solver who works well independently.
- Stays calm and collaborative under pressure in time-sensitive situations.
- Strong organization, prioritization, and multitasking skills.
Preferred
- Experience with AWS services such as EC2, S3, Lambda, and RDS.
- Proficiency in Python and SQL.
Key Details
- Start Date: November 17, 2026
- Duration: 12 months
- Location: Remote (within the U.S.)
- Work Schedule: Full-time, 40 hours per week (Monday-Friday), plus participation in an on-call rotation
- Pay Rate: Up to $120-$137/hour + benefits
- Work Authorization: Must be authorized to work in the U.S. without sponsorship.
- Engagement: W-2 Contract



