Insider Threat Detection Engineer

Details

The Staff Risk and Investigations team within Bloomberg’s Chief Information Security Office is responsible for implementing an Insider Threat program across Bloomberg, including designing and building dynamic models focused on detecting anomalous user behavior and other high-risk events.

The Detection Engineer will enhance the Insider Threat program by working closely with security, development, and investigative teams to solve complex risk and security challenges.

Responsibilities

• Research, develop, document, and tune novel detections that uncover anomalies related to insider risk.
• Leverage technology, custom analytics, and automation to create scalable detection pipelines and support investigative workflows.
• Design and mature detection strategy, including continuously evaluating changes in actors, tactics, techniques, and targets to enhance threat scenarios and use cases.
• Help ensure the team maintains pace with a changing insider threat landscape.
• Develop and maintain strong working relationships and cross-functional collaboration with Information Security, Technology, Physical Security, Incident Management, Legal, HR, and other stakeholders.

Requirements

• 5+ years of experience working in a detection, incident response, or insider-risk role; mid-level and senior candidates are sought.
• Experience with a broad range of security tools and technologies, including endpoint detection and network technologies, as well as SOAR and SIEM platforms.
• Initiative and the ability to thrive in a dynamic, fast-paced, and collaborative environment with minimal supervision.
• Demonstrated success in managing projects and working closely with business stakeholders.
• Experience working with and handling extremely sensitive materials and information.
• Awareness of the latest cybersecurity trends and developments.
• Proficiency in Python and SQL.
• Strong verbal and written communication, presentation, and stakeholder management skills.

Preferred Qualifications

• Exposure to or knowledge of employment and/or privacy laws and regulations.
• Experience with AI and LLM technologies to help enrich and automate security operational processes.
• Computer forensics experience, including analyzing Linux, Windows, and macOS systems.
• Comfort presenting to executive leaders in technology roles and explaining security risks to non-technical audiences.

Benefits

Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs.