Senior Security Engineer, Insider Threat Detection & Response

Maleda Tech

1d•$115 - $137•Remote

About The Position

We are seeking a Senior Security Engineer to help build and mature an insider threat detection and response program from the ground up. The role is part of a front-line security team that detects, investigates, and responds to threats against company data, systems, and infrastructure. The engineer will shape detection capabilities through hands-on technical work and cross-functional influence, helping protect the organization’s most sensitive information. The position is remote within the U.S. and is a 12-month W-2 contract. It is full-time at 40 hours per week, Monday through Friday, with participation in an on-call rotation supporting 24/7 detection and response coverage. The start date is November 17, 2026. Pay is up to $120–$137 per hour, plus benefits. Candidates must be authorized to work in the U.S. without sponsorship.

Requirements

At least 5 years of hands-on experience in security operations, such as detection engineering, threat hunting, incident response, digital forensics, or threat intelligence.
Bachelor’s degree in a related technical field, or equivalent practical experience.
Experience with insider threat technologies such as Data Loss Prevention (DLP) and User and Entity Behavior Analytics (UEBA).
Exposure to data science and analytics approaches applied to insider threat detection.
Experience automating security detection and response.
Solid understanding of the connection between insider threat and incident response, including coordinating responses to insider incidents.
Working knowledge of insider threat challenges at consumer-facing companies.
Familiarity with the Cyber Kill Chain and MITRE ATT&CK frameworks and their application to insider threats.
Self-motivated, creative problem-solver who works well independently.
Ability to remain calm and collaborative under pressure in time-sensitive situations.
Strong organization, prioritization, and multitasking skills.
Must be authorized to work in the U.S. without sponsorship.

Nice To Haves

Experience with AWS services such as EC2, S3, Lambda, and RDS.
Proficiency in Python and SQL.

Responsibilities

Identify infrastructure visibility gaps and partner with business teams to address them through improved logging and detection.
Design and write detections for data misuse and data exfiltration at scale.
Build automation and detection models to surface anomalous activity and speed up response.
Proactively hunt for insider threats across corporate and production environments.
Partner with engineering teams to develop advanced detection solutions.
Work with Human Resources and Legal on complex investigations.
Recommend and help design countermeasures to reduce insider risk.
Participate in incident response and provide subject-matter expertise during insider threat incidents.
Participate in an on-call rotation supporting 24/7 detection and response coverage.
Contribute to security awareness messaging and training.