Cybersecurity Operations (Insider Threat Investigations Lead)

Over the last 20 years, Ares’ success has been driven by our people and our culture. Today, our team is guided by our core values – Collaborative, Responsible, Entrepreneurial, Self-Aware, Trustworthy – and our purpose to be a catalyst for shared prosperity and a better future. Through our recruitment, career development and employee-focused programming, we are committed to fostering a welcoming and inclusive work environment where high-performance talent of diverse backgrounds, experiences, and perspectives can build careers within this exciting and growing industry.

Job Description

PRIMARY FUNCTIONS AND ESSENTIAL RESPONSIBILITIES:

• Use monitoring and detection platforms to investigate anomalous and potentially risky activity
• Lead investigations, coordinating support from other teams where required
• Advise and assist in the onboarding and operationalization of a new Insider Threta tool. Evaluate other tooling as needed.
• Create standard operating procedures for investigations and cross-functional processes
• Prepare chain-of-evidence and engage with Legal counsel, if/when required
• Help establish and maintain investigative standards, workflows, and documentation practices
• Ensure investigative activities comply with legal, regulatory, and ethical requirements related to privacy, labor law, and corporate governance

QUALIFICATIONS:

• Bachelor’s degree in Computer Science, Information Technology, Business or equivalent discipline or demonstrated requisite years of experience for on-the-job training. 
• Recommended: Professional Certifications such as CISSP, CCSK, GIAC, or OSCP
• Between 10-15 years of experience in Enterprise Cybersecurity in the financial, government, military, law enforcement or  technology sector 
• Previous experience supporting or leading incident response or detection engineering functions 
• Deep understanding of insider threat indicators, data exfiltration patterns, analyzing and correlating activities from different tools, and cybercrime tactics 
• Experience with timely deliveries 
• Experience preferred with threat hunting, incident response, SIEM, Data Loss Prevention and Insider Threat platforms. 
• Experience with offensive security practices (e.g. red teaming, penetration testing) is an advantage 
• Deep understanding and practice of operational security 
• Candidate should be willing to work flexible hours when needed due to the nature of insider threats 
• Candidate should be able to work in a hybrid capacity from the local Ares office 
• Strong analytical, critical thinking, and problem-solving skills 
• High level of personal integrity, and the ability to professionally handle confidential matters and show an appropriate level of judgment and maturity 
• Ability to interact effectively at all levels with sensitivity to cultural diversity 

Reporting Relationships

Compensation

$210,000 - $230,000

There is no set deadline to apply for this job opportunity. Applications will be accepted on an ongoing basis until the search is no longer active.