Sr Insider Threat Engineer

PayPal • Austin, TX

5d

About The Position

Independently apply security best practices to enhance and optimize systems, ensuring robust protection and efficiency, while beginning to understand and align security solutions with business objectives. Partner with peers and internal teams to drive security initiatives, contribute to cross-functional projects, and at times co-lead efforts to strengthen security posture. Analyze and resolve security challenges by adapting standard processes and exploring alternative approaches to address complex threats. Influence the quality, efficiency, and effectiveness of the team through informed decision-making, with a potential impact on other teams. Collaborate with other engineers to gather and incorporate feedback, driving continuous improvements in security processes. Create capabilities for detecting irregular and/or abnormal internal activities. Provide mentoring and guidance on technical insider risk related matters, methodologies, and techniques both within the team and to external partners across the Enterprise Act as subject matter expert (SME) spokesperson for all technical aspects of insider risk research and analysis Recommend configuration changes to improve the performance, usability, and value of threat analysis tools Experience briefing in large groups and including senior personnel Identify current insider threat trends and assess program effectiveness based on those trends/risks Partner with stakeholders across the enterprise to implement preventative controls wherever possible Stay updated on industry trends, best practices, and our business strategy to enable the achievement of ITRM objectives 3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience. Experience in systems engineering, computer science, information systems, or other technical/behavioral degree related to the critical thinking disciplines of inspection, investigation, enforcement, and compliance Knowledge of insider risk indicators, including writing detection rules in SIEM (or other related tools) Ability to multi-task, manage, organize volume and variety of topics Actively aware of the insider threat landscape, and understand the legal, regulatory, and ethical considerations of working with sensitive information and situations Effective problem-solving abilities with key stakeholders and partners on control gaps Comfortable working cross-functionally with infrastructure, IT, and response teams to design and implement technical controls Discreet, thoughtful, and seek to coordinate systemic, cross functional solutions to mitigate risk Ability to translate complex problems into readily implemented and preferably automated solutions Linking disparate information such that it can be aggregated, visualized, and interpreted for indications of threat (via query builds, table joins, etc.) Bachelor's degree in Computer Science, Engineering, or equivalent experience 3+ years of experience in Detection & Response Engineering or similar Security Engineering role

Requirements

• 3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience
• Experience in systems engineering, computer science, information systems, or other technical/behavioral degree related to the critical thinking disciplines of inspection, investigation, enforcement, and compliance
• Knowledge of insider risk indicators, including writing detection rules in SIEM (or other related tools)
• Ability to multi-task, manage, organize volume and variety of topics
• Actively aware of the insider threat landscape, and understand the legal, regulatory, and ethical considerations of working with sensitive information and situations
• Effective problem-solving abilities with key stakeholders and partners on control gaps
• Comfortable working cross-functionally with infrastructure, IT, and response teams to design and implement technical controls
• Discreet, thoughtful, and seek to coordinate systemic, cross functional solutions to mitigate risk
• Ability to translate complex problems into readily implemented and preferably automated solutions
• Linking disparate information such that it can be aggregated, visualized, and interpreted for indications of threat (via query builds, table joins, etc.)
• 3+ years of experience in Detection & Response Engineering or similar Security Engineering role

Responsibilities

• Independently apply security best practices to enhance and optimize systems
• Partner with peers and internal teams to drive security initiatives
• Contribute to cross-functional projects
• Co-lead efforts to strengthen security posture
• Analyze and resolve security challenges
• Create capabilities for detecting irregular and/or abnormal internal activities
• Provide mentoring and guidance on technical insider risk related matters
• Act as subject matter expert (SME) spokesperson for all technical aspects of insider risk research and analysis
• Recommend configuration changes to improve the performance, usability, and value of threat analysis tools
• Identify current insider threat trends and assess program effectiveness based on those trends/risks
• Partner with stakeholders across the enterprise to implement preventative controls
• Stay updated on industry trends, best practices, and our business strategy to enable the achievement of ITRM objectives

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees