Principal - Digital Investigations, Analytics & Insider Threat

About the role

The Principal, Digital Investigations, Analytics & Insider Threat will lead workstreams within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus, and act as a subject matter expert for the capability.

What you'll do

• Lead insider threat workstreams from definition through delivery, acting as subject matter expert for the capability
• Conduct digital investigations into suspected policy violation, data theft and insider activity
• Perform tactical analysis across multiple information streams to detect insider threat indicators, and statistical analysis of insider events to identify patterns
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load
• Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer

What you need

• Analytics
• DLP
• Cloud security
• Machine learning
• IPR
• ETL
• Any graduate

Good to have

• SIEM
• CISSP
• EDR
• Data visualisation