Insider Threat Detection Engineer

🕒 August 17

🏄 California, District of Columbia, +4 more states – Remote

🏄 California – Remote 🏛️ District of Columbia – Remote 🌲 North Carolina – Remote 🤠 Texas – Remote ⚔️ Virginia – Remote ☕ Washington – Remote

💵 $168k - $310.5k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 19%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

NVIDIA

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1993

🏥 Healthcare

🏭 Manufacturing

🤖 Artificial Intelligence

Healthcare • Manufacturing • Artificial Intelligence

NVIDIA is a leading technology company specializing in accelerated computing and artificial intelligence. NVIDIA pioneers advancements in graphical processing units (GPUs), cloud computing, data centers, and virtual reality, with a focus on gaming, automotive, healthcare, and robotics industries. The company's innovations, such as NVIDIA Omniverse, transform traditional digital processes by enabling high-fidelity simulations and rendering tasks. Their applications span various industries, from autonomous vehicles using NVIDIA DRIVE to healthcare solutions with NVIDIA Clara, and AI-driven analytics and workflows.

📋 Description

• Build, test, deploy, and tune detections across identity, endpoint, cloud, SaaS, collaboration platforms, source-code repositories, build systems, removable media, data movement, and employee-lifecycle signals • Lead and support investigations involving unusual data movement, unapproved application use, external sharing, access anomalies, compromised accounts, employee transitions, and other defined insider-risk scenarios • Collect and correlate information from endpoint, identity, cloud, source-code, collaboration, data-protection, and approved business sources to reconstruct activity and establish timelines • Develop automation, data pipelines, integrations, dashboards, and investigation tools that reduce manual work and improve investigation consistency and efficiency • Operate and improve insider-risk and data loss prevention capabilities by assessing policy performance, detection coverage, alert quality, false positives, and case-management workflows • Use documented hypotheses, threat models, test cases, version control, peer review, and performance measures to improve detections • Work with system owners to address gaps in telemetry or controls • Present findings distinguishing facts from inferences, including confidence levels, data limitations, alternative explanations, and unanswered questions • Work with authorized partners on evidence preservation, containment, escalation, and remediation while following requirements for investigative scope, access, confidentiality, auditing, and retention • Collaborate with Security, Legal, HR, Privacy, IT, Incident Response, engineering teams, and business partners throughout investigations

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Data Engineering, or a related field, or equivalent experience • 7+ years of experience in insider threat, detection engineering, security operations, incident response, digital forensics, data protection, threat hunting, or a related security field • Experience conducting security investigations, including defining scope, collecting evidence, developing timelines, analyzing activity, documenting findings, escalating concerns, and applying lessons learned • Experience with security technologies such as SIEM, DLP, UEBA, EDR, insider-risk management, identity security, case management, or security orchestration • Proficiency in at least one programming or scripting language, such as Python, Go, Java, JavaScript, or TypeScript • Experience building automation with APIs, structured data, source control, and testing • SQL, security-query, and data-analysis skills • Knowledge of identity and access management, endpoints, cloud services, collaboration platforms, SaaS integrations, data classification, source-code environments, and data-exfiltration methods • Experience translating insider-risk scenarios into telemetry requirements, detection logic, investigation workflows, controls, test cases, and performance measures • Ability to assess activity objectively, distinguish indicators from substantiated findings, avoid assumptions about intent, and explain the limits of available evidence • Clear written and verbal communication and experience working with technical, legal, privacy, HR, and business partners on sensitive matters • Experience engineering insider-risk, data loss prevention, or endpoint data-protection capabilities and connecting their signals to SIEM, orchestration, enrichment, or case-management systems • Experience investigating data movement across email, cloud storage, collaboration tools, source-code repositories, build systems, artifact stores, removable media, browsers, AI tools, and unmanaged or partially managed environments • Experience building security data pipelines, entity timelines, relationship models, behavioral baselines, or applications used by investigators • Knowledge of digital forensics, evidence preservation, chain of custody, incident-response coordination, and the legal, privacy, and employee-relations requirements associated with workforce investigations • Senior candidates may also bring experience leading projects, reviewing designs, and mentoring engineers or investigators

🏖️ Benefits

• Equity • Benefits