Key skills
CloudCyber SecurityPythonPowerShellAnalyticsCommunicationCloud Security
About this role
Role Overview
- Help lead the design, implementation and continuous improvement of the Insider Threat and DLP programs
- Define metrics to ensure comprehensive, effective, and efficient coverage
- Cross train with teams within the Cyber Fusion Center
- Assist in implementation of net new DLP capabilities
- Become proficient in workflow automation within our SOAR platform
- Monitor, investigate and maintain DLP technologies
- Conduct root cause analysis and recommend remediation actions
- Integrate DLP tools with SIEM, UEBA, CASB, and endpoint detection platforms
- Conduct continuous improvement of custom rules based on tradecraft knowledge
- Work closely with Employee Relations, Human Resources, Security Architecture, and policy teams
Requirements
- 4 year degree or equivalent experience
- 7+ years in cybersecurity with a focus in Incident Response, DLP, and Insider Threat
- Extensive experience with DLP tools (e.g. ZScaler, ForcePoint, Symantec)
- Deep understanding of Insider Threat methodologies and behavioral analytics
- Demonstrated programming experience in Python, PowerShell or equivalent
- Experience with maintaining SIEM, UEBA, EDR, and cloud security platforms
- Demonstrated ability to build strong cross-functional partnerships
- Strong problem-solving skills with the ability to navigate complex security challenges
- Excellent communication skills
Tech Stack
- Cloud
- Cyber Security
- Python
Benefits
- comprehensive health benefits and programs
- medical, vision, dental, life insurance
- 401(k)
- employee discount
- short term disability
- long term disability
- paid sick leave
- paid national holidays
- paid vacation