Senior Insider Threat Analyst

Job description

Job responsibilities

• Support Anduril Intelligence Systems as our front line responder by identifying, triaging, investigating, and remediating Insider Threat related security detections and anomalies.
• Own Insider Threat investigations from end to end.
• Lead evaluating and implementing controls to reduce Anduril's attack surface from an insider threat.
• Produce dashboards and metrics to support and streamline incident response and investigations.
• Perform threat hunting and identify anomalies within the environment to uncover insider threat activity.
• Communicate technical security concerns and issues to a non-technical audience.
• Deeply embed yourself within the AIS business line and form relationships with key stakeholders.

Job requirements

• Action-oriented analyst with the ability to work autonomously and take ownership of complex projects.
• Knowledge of modern adversary tradecraft and mitigating controls.
• Proven experience in insider threat investigations, digital forensics, and incident response.
• Ability to analyze large datasets across various systems (SIEM, data lake, etc.).
• Experience with Endpoint Detection and Response (EDR) tools, Data Loss Prevention (DLP), and other telemetry sources.
• Excellent analytical skills, capable of interpreting complex data and deriving actionable insights.
• Capable of handling highly sensitive investigations with utmost discretion.
• Currently possesses and can maintain an active U.S. Top Secret SCI security clearance.