Staff Information Security Analyst
- Guidewire Software
- 5 - 8 years
- Bengaluru
- 14 days ago
- Email to a friend
- Report this job
Job Description
- Establish, implement, and oversee the Insider Threat Program, ensuring compliance with organizational goals, industry best practices, and legal requirements.
- Collaborate with multidisciplinary teams, including Physical Security, Legal, Human Resources, Engineering, and the broader Security team, to formulate and enforce policies, procedures, and controls to mitigate insider threats.
- Develop and utilize advanced tools and methodologies to monitor activities, identify anomalies, and investigate potential insider risks.
- Partner with the Detection Engineering and Threat Intelligence team on detection efforts, prioritizing alert reviews, correlation, analysis, playbook development, and recommendations for further investigation and mitigation.
- Provide support for critical security investigations, in conjunction with the Incident Response team and relevant departments, including Legal and HR, to ensure timely and effective resolution.
- Conduct regular tabletop exercises, security awareness training, and simulations to validate the efficacy of insider threat detection and educate employees on insider risks.
- Produce comprehensive investigative reports and executive summaries to present findings.
- Eight to ten-plus years of experience spanning Insider Threat management, Detection Engineering, or Incident Response.
- Experience with Insider Threat technologies, such as Security Information and Event Management (SIEM), User Behavioral Analytics (UBA), Data Loss Prevention (DLP), and endpoint detection, coupled with a solid understanding of investigations and the intelligence cycle.
- Proficiency in scripting and automation (Python, PowerShell, or Bash) for detection and triage workflows.
- Experience with SIEM platforms and detection frameworks (e.g., MITRE ATT&CK).
- Demonstrated ability to work cross-functionally and effectively communicate findings to both technical and non-technical stakeholders.
- Experience with cloud environments (AWS, GCP, etc.) and detection infrastructure.
- Staying abreast of the evolving insider threat landscape and understanding the legal, regulatory, and ethical considerations while handling sensitive information and situations.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Security Engineer / AnalystEmployement Type: Full timeContact Details:
Company: Guidewire SoftwareLocation(s): Bengaluru
Keyskills: Automation Information Security Analyst data loss prevention GCP Event management Legal Investigation Physical security Analytics Python
Similar positions
Guidewire Software
Guidewire exists to deliver the software that P&C insurers need to adapt and succeed in a time of rapid industry change, and to ensure that every customer succeeds in the journeyWe believe that P&C insurance plays a vital role in protecting people and business, and in enabling society to fun...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in