Kortex XO

Insider Threat Analyst

We are seeking a highly skilled and motivated Insider Threat Analyst to join our security team. The ideal candidate will have a comprehensive understanding of threat detection and analysis risk assessment and management and policy development and enforcement. This role requires handson experience in identifying and mitigating insider threats to safeguard our organizations sensitive data and assets.

As an Insider Threat Analyst you will be responsible for monitoring and analyzing user activities network events and various information sources to detect potential insider threats. Your role will also involve conducting comprehensive risk assessments focused on insider threats Additionally you will lead investigations into suspicious activities or policy violations collaborate with other security professionals during incident response efforts and document your findings in detailed incident reports.

A key aspect of this role is assisting in the creation and enforcement of security policies and procedures You will recommend improvements to existing policies to enhance our security posture and ensure compliance with industry regulations and standards.

To excel in this role you must be proficient in various technical tools and technologies including SIEM systems like Splunk and IBM QRadar UEBA solutions such as Exabeam and Darktrace and DLP tools like Symantec DLP and McAfee DLP Additionally familiarity with endpoint security solutions network monitoring tools malware analysis tools and incident response platforms is crucial.

You should have a strong understanding of network protocols operating systems and database management Your analytical and problem solving skills will be essential in analyzing complex datasets identifying anomalies and addressing security challenges Excellent communication and collaboration skills are also vital as you will need to present technical information to nontechnical stakeholders and work effectively with cross functional teams.

Key Requirements

• Previous experience in cybersecurity roles particularly in threat analysis and incident response
• Prior experience in a Security Operations Center SOC or similar environment is beneficial
• Expertise in Security Information and Event Management SIEM tools such as Splunk IBM QRadar
• Proficiency in User and Entity Behavior Analytics UEBA solutions like Exabeam and Darktrace
• Experience with Data Loss Prevention DLP technologies including Symantec DLP and McAfee DLP
• Strong understanding of endpoint security solutions such as Crowd Strike and Palo Alto Networks
• Familiarity with network monitoring tools like Wireshark and Solar Winds
• Proficiency in malware analysis tools such as IDA Pro and Ghidra
• Knowledge of incident response platforms like The Hive and MIRATE

Skills

Splunk

Crowd Strike

Palo Alto Networks

DLP tools

UEBA tools

Monitoring tools