Senior Security Analyst, Trusted Insider

<p><b>Job Requisition ID #</b></p>25WD90117<p></p><p></p><p><b>Position Overview</b></p><p></p><p><span>Autodesk’s mission is to empower everyone, everywhere, to design and make anything. We secure it.</span></p><p></p><p><span>Autodesk’s Security Threat Analytics Group is seeking a Senior Security Analyst - Trusted Insider to join our team in Poland, and help shape the future of the Trusted Insider Program at Autodesk</span></p><p><span>You will become part of a dynamic, tech-focused team where your cyber security expertise is highly valued and crucial. Our Threat Analytics Group amplifies capabilities by merging deep technical knowledge with creative problem-solving in an environment that rewards innovation and precision. If you are passionate about achieving results, minimizing risk, and engaging in critical discussions about prioritizing efforts, Autodesk is the ideal place for you to lead, collaborate, and advance your career.</span></p><p></p><p></p><p><span>At Autodesk, we redefine the concept of insider threat as "Trusted Insider" to emphasize our commitment to supporting and safeguarding our valued employees. This approach recognizes that even trusted individuals may accidentally misuse their access privileges or become targets of malicious actors. By focusing on the Trusted Insider, we aim to prevent and address any unintentional mistakes and protect against exploitation, ensuring a secure and supportive environment for all.</span></p><p></p><p><span>Our Trusted Insider Protection (TIP) program is designed to establish robust systems for the detection and prevention of insider threats within Autodesk. By leveraging both internal and external intelligence sources, the TIP program continuously enhances the accuracy and effectiveness of detection mechanisms. It aims to respond promptly to suspicious events, ensuring thorough and successful investigations. Through proactive measures and enhanced collaboration among relevant teams, TIP strives to mitigate risks posed by insiders, ultimately creating a secure environment where internal threats are identified and neutralized effectively.</span></p><p><span>The TIP program is not a replacement for existing Data Loss Prevention (DLP), Governance, Risk Management, and Compliance (GRC), Threat Hunting, or Incident Response functions. Instead, TIP focuses specifically on activities that suggest potential maliciousness and warrants further monitoring, escalation to Legal, HR or other technical team. This role will directly support and be supported by Threat Intelligence, Incident Response, Data Engineering, and Threat Hunting teams.</span></p><p></p><p></p><p><b><span>Key Responsibilities</span></b></p><ul><li><span>Assess and investigate complex insider risk incidents and digital behaviours of concern, ensuring a thorough and mature investigative process from inception to conclusion.</span></li><li><span>Conduct sensitive interviews with people of interest during insider risk investigations.</span></li><li><span>Document investigative results articulately to ensure accurate reporting, tracking, and documentation of incidents and behaviours of concern throughout the incident lifecycle.</span></li><li><span>Influence the design of Trusted Insider security strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets and infrastructure. Assist with building a strong pipeline of new detections based on best practices, current risk trends, and previous incidents.</span></li><li><span>Produce high-quality investigative reports, assessments, and briefings for senior management and stakeholders.</span></li><li><span>Collaborate with various teams to enhance early warning indicators in user behaviour analytics.</span></li><li><span>Develop cross-functional playbooks and defined lifecycles to streamline investigation and response processes.</span></li><li><span>Foster collaboration and support across security functions including GRC, Security Operations, Incident Response, Threat Intelligence and Data Security teams.</span></li><li><span>Other duties as assigned.</span></li></ul><p></p><p></p><p><b><span>Qualifications</span></b></p><ul><li><span>In-depth knowledge of Insider risk/Data Loss Prevention programs, incident management and investigative programs.</span></li><li><span>Strong analytical skills with experience in user behaviour analytics and early warning systems.</span></li><li><span>Understanding of technical controls for insider risk/DLP.</span></li><li><span>Excellent communication, teamwork and collaborative skills; ability to work effectively in a fast-paced, dynamic environment.</span></li><li><span>Capability to develop metrics to quantify threat intelligence improvements over time, providing measurable insights into program effectiveness.</span></li><li><span>Ability to influence and build effective working relationships with all levels of the organization.</span></li><li><span>Demonstrated