Posted in

Staff Engineer – Insider Risk Program

Staff Engineer – Insider Risk Program

CompanyTwilio
LocationOntario, Canada
Salary$118200 – $147700
TypeFull-Time
Degrees
Experience LevelSenior, Expert or higher

Requirements

  • 6+ years of hands-on cyber security investigations experience in law enforcement, counterintelligence, or private sector industry equivalent.
  • Experience with emerging cloud technology services and their effect on digital investigations.
  • Experience interviewing cyber risk actors in particular Insider risk actors and impacted individuals.
  • Knowledge of Insider risk/Data Loss Prevention programs, incident management and investigative programs.
  • Experience with cyber security tools, UEBA/DLP/SIEM/SOAR is a plus.
  • Basic scripting and coding skills (Powershell, VBscript, Bash, Python, SQL, etc..)
  • Excellent written and verbal communication skills.
  • Ability to influence and build effective working relationships with all levels of the organization.
  • Flexible to work additional hours during incidents and provide team support as needed.

Responsibilities

  • Collaborating and acting as a liaison between Insider risk analysts and End users, Legal, HR, other stakeholders to address findings.
  • Assess and investigate complex insider risk incidents and digital behaviours of concern, providing a thorough and mature investigative process from start to end.
  • Demonstrate an expert level of business acumen and employment legal considerations throughout the investigations.
  • Conduct sensitive interviews of persons of interest during insider risk investigations.
  • Examine the case summary provided by the Insider risk analysts and evaluate the appropriate course of action to mitigate the identified security concern within daily operations and incident reviews.
  • Document investigative results in an articulate manner to ensure accurate reporting, tracking and documentation of incidents and behaviors of concern through the entire lifecycle of the incident.
  • Produce high quality investigative reports, assessments and briefings for senior management and stakeholders.
  • Convey complex security issues to both technical and non-technical audiences with clarity and impact.
  • Collaborate closely with the Insider Risk Program Manager and cross-functional partners, including Employee Relations, Employment Legal, and HR, to develop and formalize comprehensive runbooks and standard operating procedures that proactively address and mitigate insider risk.
  • Capable of undertaking analytical and project tasks to support the team as needed.

Preferred Qualifications

    No preferred qualifications provided.