Insider Risk Security Engineer

Overview

Serve as a senior contributor to the Insider Risk program by improving detection, leading investigations, developing playbooks, mentoring junior analysts, and partnering with key stakeholders.

What you'll do

• Refine insider risk detection rules to reduce noise and close coverage gaps.
• Investigate endpoint and user activity using EDR/XDR, UEBA, and SIEM tools.
• Manage investigation cases end to end and create factual timelines.
• Develop and improve scalable insider risk investigation playbooks.
• Represent the team with HR, Legal, business leaders, and executives.
• Prepare clear evidentiary case documentation.

What you'll need

• 6+ years of experience in insider risk, data protection, fraud investigation, or security operations.
• Experience in senior investigative roles, process ownership, and detection framework design.
• Experience managing and dispositioning alerts in a SIEM or SOAR.
• Strong cross-functional communication skills and sound judgment.
• Proficiency in Python or JavaScript for investigative workflow automation.
• U.S. citizenship.

Nice to have

• Experience with Zscaler's CyberRisk Protection, Data Protection, or Zero Trust Networking products.
• Experience implementing security use cases with product development teams.
• GCFA, GCFE, or equivalent forensics credentials.
• Familiarity with CERT, NIST, or NSA frameworks.

Details

• Remote role in the United States.
• Full-time position.
• Base salary: $134,000–$167,500 USD yearly.