Insider Risk Senior Security Engineer

“I can succeed as the Insider Risk Senior Security Engineer at Capital Group.”

The Insider Risk program is a comprehensive approach to identifying, mitigating, and responding to risks and potential harm caused by individuals with authorized access to systems in Capital Group. This role requires a highly curious and skilled practitioner to identify and respond to high-risk activity and anomalous behaviors that may be indicative of harmful insider activity. This includes intellectual property theft, espionage, fraud, sabotage, and unauthorized data disclosure. 

As part of the Data Protection team, the candidate will help refine the data protection and insider risk strategy, mature an established governance and operating model, rationalize product toolsets, and influence the modification of business processes for enhanced data protection. The candidate will be responsible for the engineering and innovation of detecting and investigating anomalous user activities and indicators of potential insider threats.

Responsibilities:

• Utilize cyber security expertise, knowledge of insider threat detection, and data analytics to create innovative strategies for detecting and preventing malicious activities.

• Collaborate with the Security Intelligence Response Team (SIRT), the Hunt Team, the Red Team and Security operations and engineering to develop innovative Insider Threat capabilities to further enhance our proactive and reactive security program.

• Conduct in depth analysis of logs received from various data sources: Assemble, correlate, evaluate and assess information concerning insider threats.

• Develop and maintain insider risk techniques and procedures, to include use cases surrounding data exfiltration, internal fraud, privilege escalations, as well as sabotage for on-premises and cloud environments.

• Create Tactics and procedures to identify insider threats and other related threats.

• Draft and present detailed investigative reports and summaries.

• Evaluate, recommend, and improve upon existing technical and non-technical solutions to detect and respond to potential insider threats.

“I am the person Capital Group is looking for.”

• At least 6 years of experience in the cyber, investigative analysis, or the intelligence field.

• At least 3 years of experience leading or conducting technical investigations utilizing insider threat tools (UEBA, SIEM).

• Ability to professionally handle confidential matters with appropriate judgement around escalation.

• Excellent verbal and written communication skills to translate the vision and strategy into clear priorities and direction, both internally and externally.

• Strong analytical and quantitative skills; ability to use data and metrics to drive recommendations.

• Experience with data analytics tools used for insider threat information collection and knowledge of other insider threat risk scoring data analytics tools.

‎ 

Southern California Base Salary Range: $140,995-$225,592

‎ 

San Antonio Base Salary Range: $115,910-$185,456

‎ 

‎ 

New York Base Salary Range: $149,462-$239,139

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital’s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.

You can learn more about our compensation and benefits here.

We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.