What you'll work on:

📍Conduct analysis of user behavior and organizational controls apparent in security logging. 📍Leverage analysis to build technical detections and controls. 📍Drive the development and implementation of automated data access checks across various platforms to help detect abuse and data exfiltration. 📍Perform security incident investigations using data analytics and computer forensics. 📍Build automation and detection models to support identification of anomalous activity to mitigate insider risk at scale. 📍Identify gaps in our infrastructure, and work with business partners to gain visibility through logging and detection. 📍Partner with stakeholders to contribute to Security Awareness messaging, training and exercises. 📍Drive deployment, development, and improvements in Security Incident and Event Management, Case Management, and Automation. 📍Provide security guidance to various organizations throughout the company.

You will aspire to our four core values:

📍Multistakeholder - you have dedication and commitment to our customers, shareholders, employees and families and local communities. 📍Mindful - you seek to be respectful, an active listener and to pay attention to detail. 📍Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals. 📍High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards. You reject manipulation, dishonesty and intolerance.

What you’ll bring to Circle:

📍5-7+ years experience in security operations such as technical investigations or Digital Forensics and Incident Response (DFIR) with a minimum of two years (can be overlapping) with a focus on Insider Threat. 📍Experience with technologies relevant to Insider Threat (SIEMs, DLP solutions, CASBs, UEBA tools, host forensic solutions). 📍Experience in data science and analytics solutions applicable to the insider threat detection space. 📍Exposure to programming, scripting and query languages such as Python, Golang, bash, SQL. 📍Strong ability to work collaboratively across teams during high-stress situations. 📍Ability to manage multiple competing priorities and use good judgment to establish order of priorities on the fly. 📍Self-motivated and creative problem-solver able to work independently with minimal guidance. 📍Enthusiasm for scalable, reproducible security management. 📍In-depth knowledge of the insider threat landscape. 📍Deep knowledge of SIEM, Case Management, EDR/ MDR, and DLP solutions. 📍Experience working in financial services or financial technology desired. 📍Experience working in an AWS environment preferred. 📍Experience communicating technical findings to a variety of stakeholders. 📍Proficiency in Google Suite, Slack and Apple MacOS preferred. 📍Certifications such as CMU CERT ITPM/ ITVA, CCITP, CISM, CDPSE or similar will receive favorable consideration but are not required.

Additional Information:

📍This position is eligible for day-one PERM sponsorship for qualified candidates.