Engineer - Digital Investigations, Analytics & Insider Threat

About the role

The Engineer, Digital Investigations, Analytics & Insider Threat will support delivery of the team's work and build depth within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus.

What you'll do

• Support day-to-day insider threat monitoring, triage and case support under the direction of senior colleagues
• Conduct digital investigations into suspected policy violation, data theft and insider activity
• Perform tactical analysis across multiple information streams to detect insider threat indicators
• Help build and tune detection logic across DLP and UEBA platforms
• Help maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer

What you need

• Analytics
• Cloud security
• Machine learning
• DLP
• ETL
• IPR

Good to have

• SIEM
• CISSP
• EDR
• Data visualisation