Insider Threat Engineer

📋 Description Lead Insider Threat Digital Investigations across IR teams. Hunt for insider threats using SIEM, EDR, UEBA data sources. Develop detections, rules, and playbooks for insider threats. Collaborate with Legal, HR, Privacy; present findings to leadership. Ensure regulatory and privacy requirements are met in investigations. 🎯 Requirements 5+ years in technical security; 2+ years insider threat or investigations. Experience leading complex investigations with forensic tools (EnCase, FTK, X-Ways). Deep knowledge of SIEM (Splunk, Elastic), EDR (CrowdStrike, SentinelOne), UEBA. Strong scripting/programming skills (Python, PowerShell). Excellent written and verbal communication; explain tech to non-tech. Experience with legal and HR on sensitive matters. 🎁 Benefits Equal opportunity employer; commitment to diversity and inclusion. Reasonable accommodations for applicants with disabilities. Opportunity to work on large-scale internet infrastructure projects (Cloudflare initiatives). Collaborative, AI-enabled culture with rapid iteration.