Vice President, Insider Threat UEBA

• · Functional title - UEBA Use Case Developer/Manager UEBA
• Department – IT Security
• Report to – Director of Insider Threat
• Location - Iselin, New Jersey
• Compensation – $143, base salary + variable compensation + 401(k) match + benefits

CLS is seeking a highly motivated, and skilled Vice President - UEBA (User Entity Behavioral Analysis) Use Case Developer/Manager to join our Insider Threat Team. The role will be located in New Jersey. The position will report to the Director of Insider Threat and will participate in the development, implementation, and continuous improvement of a new Insider Threat team.

This role involves the identification, detection and investigation of abnormal actions from internal accounts which may be indicative of risk posed by individuals with authorized access to organizational assets, including employees and third-party vendors. The position will require collaboration with cross-functional teams to mitigate the risks of malicious, negligent, or unintentional insider actions that could lead to security breaches, data loss, or system unavailability.

This position requires someone with an analytical mind and data analysis skills, working knowledge of company systems and IT security tools, a quick learner, and the ability to propose and execute on program improvements. This role will also be responsible for building relationships with organizational partners and conducting investigations.

• Integrate UEBA capabilities with SIEM, SOAR, EDR DLP, and IAM systems.
• Establish baselines of normal user behavior across identity, network, endpoint and application activity.
• Monitor user risk scores and tune detection logic to reduce false positives and improve detection fidelity, identifying and onboarding new telemetry sources.
• Drive incident response and insider threat investigations with timeline and data analysis. Conduct proactive behavioral threat hunting using UEBA data.
• Manage playbook response actions and support investigations of suspected insider threat incidents to include preventative controls and user quarantine actions.
• Align behavioral monitoring with privacy, legal and HR considerations.
• Participate in the execution of the insider threat program, including the development of tools, standards, procedures, and processes to detect, prevent, and respond to insider threats.
• Research advanced detection and monitoring tools to complement existing systems.
• Drive continuous improvement by integrating lessons learned, industry best practices, and emerging threat intelligence.
• Collaborate with stakeholders across the firm to evaluate and address potential insider risks across systems, networks, and organizational processes.
• Participate in investigations and produce reports on insider threat risks, incidents, and mitigation efforts for executives to aid in their decision making.
• Work with the intelligence team to develop threat modelling deliverables,

• 8+ years of experience in information security such as Insider Threat, Investigations, Analysis, Security Operations, Incident Response, or Threat Intelligence roles.
• Experience with insider threat detection tools (UEBA, SIEM, EDR, DLP) and knowledge of advanced threat intelligence techniques.
• 3+ years of experience in Insider Threat or equivalent.
• Knowledge of fundamentals of threat actors’ TTPs and MITRE ATT&CK Framework.
• Understanding of security frameworks, incident response, and risk management practice.
• Knowledge of relevant legal and regulatory considerations, including privacy laws and data protection requirements.
• Excellent interpersonal and relationship management skills.
• Bachelor’s Degree in Cybersecurity studies, Information Systems, Computer Science,…