Insider Threat Analyst

About the Role

The Insider Threat Analyst will function as a subject matter expert at Uber’s Insider Threat Program. This role will further the development and maintenance of the Program, using technical skills across a full suite of security tools to further triage, investigate, and raise any potentially malicious incidents or anomalies.

This individual should bring experience and skill to a small, expert team and guide efforts in technical and non-technical datasets for early detection of potential insider threats and support inquiries, investigations, and incidents. The ideal candidate will be experienced in building programs from the ground up, helping to drive positive organization-wide change, and working with an international team.

What You’ll Do

• Integrate insider risk-related technologies, including DLP, UEBA, security monitoring, and others, into the Detection Program.
• Lead or assist in the investigation of all incidents involving insider threats, including identification of potentially anomalous events, analytical assessments, and providing succinct data-driven recommendations to the business.
• Collaborate with stakeholders and technical SMEs to identify and scope security vulnerabilities or concerns and design appropriate solutions.
• Collaborate in the creation of gap analyses on current tools used for the Insider Threat program and make recommendations on industry best practices.
• Must be able to understand signals/alerts aggregating in a queue and what actions need to be taken to triage and investigate across many security tools.
• Assist in the development of Insider Threat programs from the ground up, including the development of governance structures, operational models, and processes that build on existing capabilities and reduce risks to global personnel and assets.

Basic Qualifications:

• Minimum of (3) years experience working in Insider Threat program(s) or similar experience. This may include information security, security investigations, intelligence, law enforcement, data analysis, crisis management, risk management, or business continuity.
• Demonstrable experience working with insider risk-related technologies such as User Behavior Analytics tool sets, Data Loss Prevention tools, and SIEM tools.

Preferred Qualifications

• Analytical rigor - Excellent data leadership skills; SQL and Python proficiency is a plus!
• Demonstrable experience integrating security policies, virtual access, and controls.
• Experience integrating cyber security technologies with existing technologies.
• Familiarity with security program governance and security operations concepts.
• Strong interpersonal skills and highly collaborative with both business leaders and cross-functional partners, with the strong ability to establish relationships, gain credibility, and partner across functions to build consensus.
• Self-motivation with a strong affinity for vision setting, strategic problem solving, and driving action.
• The ability to prioritize multiple projects at a time in an exciting, fast-paced environment, both collaborating as a team to stay in sync and working independently to get the job done.
• Embody the highest standards of integrity, ethics, and accountability.
• Enthusiastic about Uber!

For Washington, DC-based roles: The base salary range for this role is $87,000 per year - $97,000 per year.

You will be eligible to participate in Uber's bonus program, and may be offered an equity award & other types of comp. You will also be eligible for various benefits. More details can be found at the following link https://www.uber.com/careers/benefits.

Uber is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you have a disability or special need that requires accommodation, please let us know by completing this form.

Offices continue to be central to collaboration and Uber’s cultural identity. Unless formally approved to work fully remotely, Uber expects employees to spend at least half of their work time in their assigned office. For certain roles, such as those based at green-light hubs, employees are expected to be in-office for 100% of their time. Please speak with your recruiter to better understand in-office expectations for this role.