Insider Threat Detection Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Insider Threat Detection Consultant based in the United States.

As an Insider Threat Detection Consultant, you will help design and scale data-driven capabilities that identify and mitigate insider risk across a complex organization.

You will translate business processes, user behaviors, operational risks, and control environments into actionable detection signals.

Working across business units, HR, Legal, cybersecurity, and risk functions, you will connect technical monitoring with real-world business context.

You will analyze user activity, system logs, and behavioral data to uncover anomalies and emerging indicators of insider risk.

Your expertise will help strengthen detection coverage, close control gaps, and enable more proactive risk identification.

This role combines cybersecurity, behavioral analytics, fraud and risk intelligence, and stakeholder collaboration in a highly cross-functional environment.

Depending on qualifications and interview evaluation, the opportunity may be offered at Senior Consultant, Lead Consultant, or Expert level.

Accountabilities:

• Partner with business units, HR, Legal, cybersecurity, and risk stakeholders to understand critical processes, user behaviors, operational risks, and existing controls.
• Translate business workflows, control gaps, and risk scenarios into scalable insider threat detection signals and monitoring use cases.
• Analyze user activity, system logs, behavioral data, and security telemetry to identify anomalies and potential insider risk indicators.
• Apply knowledge of insurance operations, financial services, fraud, cybersecurity, and regulatory environments to improve the relevance and accuracy of detection strategies.
• Work closely with detection, investigation, and engineering teams to align detection logic with real-world operational risks and investigative requirements.
• Assess existing controls and monitoring capabilities, identify gaps in coverage, and recommend enhancements to strengthen the insider threat program.
• Continuously refine detection methodologies using investigative feedback, emerging threats, changing business processes, and lessons learned.
• Document detection logic, methodologies, assumptions, and outcomes to promote transparency, consistency, and repeatability.
• Contribute to cybersecurity risk assessments, threat analysis, root-cause investigations, and related initiatives as needed.
• Manage multiple priorities effectively while maintaining strong communication and collaboration across technical and business stakeholders.

Requirements:

• At least 2 years of experience in cybersecurity, insider threat, fraud, risk analytics, detection engineering, or a closely related field.
• Practical experience with security and monitoring technologies such as SIEM, UEBA, DLP, EDR, or identity and access monitoring platforms.
• Strong analytical thinking and the ability to interpret behavioral, operational, and security data to identify meaningful risk patterns.
• Understanding of cybersecurity risk assessment, insider threat mitigation, security monitoring, access controls, and operational risk concepts.
• Exposure to insurance, financial services, fraud detection, or regulated environments is preferred.
• Ability to translate complex business processes and risk scenarios into technically actionable detection requirements.
• Strong cross-functional communication and stakeholder-management skills, with the ability to build effective partnerships across business and technical teams.
• Demonstrated problem-solving and root-cause analysis capabilities.
• Ability to work effectively in an evolving environment and manage multiple initiatives simultaneously.
• Experience with penetration testing, threat assessment, or related security disciplines can be valuable.
• No supervisory responsibilities are associated with this position.

  Benefits:

  • Competitive annual compensation range of $80,000-$190,000, depending on experience and qualifications and the level at which the candidate is hired.
  • Fully remote work arrangement within the United States.
  • Comprehensive technology setup for remote employees, including a laptop, monitors, headset, keyboard, and mouse.
  • Monthly connectivity reimbursement to help offset eligible home internet expenses.
  • Opportunity to work on meaningful cybersecurity and insider-risk initiatives within a large, complex organization.
  • Access to a collaborative environment that encourages innovative thinking and professional growth.
  • Candidates offered the position are required to complete a background investigation.
  • Applicants should have a dedicated, private home workspace and reliable internet connection meeting minimum requirements.
  • The position generally does not include employment-based visa sponsorship.