Detection Engineering Lead (Insider Risk)

Company Description

Guardant Health is a leading precision oncology company focused on guarding wellness and giving every person more time free from cancer. Founded in 2012, Guardant is transforming patient care and accelerating new cancer therapies by providing critical insights into what drives disease through its advanced blood and tissue tests, real-world data and AI analytics. Guardant tests help improve outcomes across all stages of care, including screening to find cancer early, monitoring for recurrence in early-stage cancer, and treatment selection for patients with advanced cancer. For more information, visit guardanthealth.com and follow the company on LinkedIn, X (Twitter) and Facebook.

Job Description

This is an exciting opportunity for a technically strong cybersecurity professional looking to take the next step into a leadership role. As Detection Engineering Lead (Insider risk), you will play a central role in helping define and build a scalable insider risk management program from the ground up. You’ll bring your hands-on experience in incident response, threat detection, and forensic analysis to lead investigations and develop processes for detecting and responding to insider threats. This role is ideal for someone ready to expand their scope beyond technical execution and start owning strategy, process design, and stakeholder collaboration. 

In this role, you’ll work closely with cross-functional teams—including HR, Legal, Cybersecurity, and Technology—to assess insider risks, manage cases, and implement mitigation strategies. You’ll also have the chance to mentor junior analysts, shape tooling and workflows, and grow your leadership skills while making a real impact. If you're ready to step up, lead with influence, and build something meaningful, this is the role for you. 

Essential Duties and Responsibilities: 

• Building a well-structured, resilient insider threat program that aligns with business goals and security standards will be central to your success. 
• Success in this role means developing and maintaining effective automations, workflows, tools, and processes that enable the team to detect and respond to high-risk insider activities with speed and precision. 
• You’ll excel by working closely with cross-functional teams, ensuring insider risks are accurately classified, reported, and resolved while enhancing incident response procedures. 
• Your ability to serve as a reliable point of contact for insider risk matters will foster a collaborative, organization-wide approach—ensuring timely updates and smooth alignment with senior leadership. 
• You’ll demonstrate impact by implementing and overseeing monitoring systems that surface behavioral anomalies, enabling early identification of suspicious insider activities. 
• You’ll help the organization stay one step ahead by working with awareness teams to identify emerging threat tactics and promote behaviors that reduce the risk of data loss or misuse. 
• Your ability to break down complex security challenges into clear, understandable messages will empower leaders across the organization to act with confidence. 
• Success in this role means effectively coordinating with Business Units, Security Operations, HR, Legal, and Compliance teams to ensure insider risks are addressed holistically and remediated efficiently while maintaining strict confidentiality and professionalism in all investigative and advisory activities. 
• A key measure of success will be your ability to create and maintain meaningful use cases in UEBA and monitoring tools that enable early detection and prioritization of risky behaviors. 
• By defining relevant metrics and KPIs, you’ll help senior leadership clearly understand program health and progress—your ability to translate data into insights will set you apart.