Insider Threat Technical Lead (5)

Summary

Serving as the technical lead for an established Insider Risk program, the full-time Insider Threat Technical Lead will guide insider-risk analysts, advise stakeholders, and build and tune Microsoft security tooling while working remotely.Key responsibilitiesAct as the insider-risk technical lead and trusted advisor to USPTO stakeholders, delivering status reports and addressing emerging requirementsOwn the technical direction of the insider-risk toolset in Microsoft Purview, including policy management and alert analysisDesign and maintain custom dashboards in Microsoft Sentinel and investigate insider-risk alerts alongside analystsRequired qualificationsBachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related fieldSeven years of specialized experience in areas such as Cybersecurity, Network Security, or Insider Threat DetectionPrimary certification such as CISSP or GIAC Security Expert (GSE)Secondary certification in one or more areas like GIAC Certified Detection Analyst or GIAC Certified Intrusion AnalystActive SECRET clearance or the ability to obtain one

Job Description

Serving as the technical lead for an established Insider Risk program, the full-time Insider Threat Technical Lead will guide insider-risk analysts, advise stakeholders, and build and tune Microsoft security tooling while working remotely.Key responsibilitiesAct as the insider-risk technical lead and trusted advisor to USPTO stakeholders, delivering status reports and addressing emerging requirementsOwn the technical direction of the insider-risk toolset in Microsoft Purview, including policy management and alert analysisDesign and maintain custom dashboards in Microsoft Sentinel and investigate insider-risk alerts alongside analystsRequired qualificationsBachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related fieldSeven years of specialized experience in areas such as Cybersecurity, Network Security, or Insider Threat DetectionPrimary certification such as CISSP or GIAC Security Expert (GSE)Secondary certification in one or more areas like GIAC Certified Detection Analyst or GIAC Certified Intrusion AnalystActive SECRET clearance or the ability to obtain one