Insider Risk Incident Responder, AVP - Cybersecurity

Blackstone is the world’s largest alternative asset manager. We seek to create positive economic impact and long-term value for our investors, the companies we invest in, and the communities in which we work. We do this by using extraordinary people and flexible capital to help companies solve problems. Our $1.1 trillion in assets under management include investment vehicles focused on private equity, real estate, public debt and equity, infrastructure, life sciences, growth equity, opportunistic, non-investment grade credit, real assets and secondary funds, all on a global basis. Further information is available at www.blackstone.com. Follow @blackstone on LinkedIn, X, and Instagram.

Blackstone Technology & Innovations

Blackstone Technology & Innovations (BXTI) is the technology team at the core of each of Blackstone’s businesses and new growth initiatives. Serving both internal and external clients, we work to build the next generation of systems that manage risk, create efficiency and improve transparency within the firm and across our broad community of investors and portfolio companies.

BXTI is nimble and entrepreneurial – our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one. We are problem solvers who can take projects from idea to implementation. We believe in active mentoring and developing excellence. We collaborate to find the best answers for our customers and for Blackstone. We are critical to the firm maintaining its competitive edge.

The Role:

Blackstone’s Insider Risk Team is integral to safeguarding the organization from threats originating within our trusted workforce, contractors, and partners. We focus on escalated insider risk incident response, advanced behavioral detection engineering, and continuous enhancement of our insider threat program capabilities.

The ideal candidate will have hands-on experience conducting investigations using insider threat management platforms, data loss prevention (DLP), user and entity behavior analytics (UEBA), and other monitoring tools across email, endpoint, network, and cloud environments. They will be adept at developing custom detections to identify and mitigate emerging insider risk scenarios, including data exfiltration, policy violations, and misuse of access privileges.

This role requires staying abreast of the evolving insider threat landscape, including changes in workforce behavior, organizational processes, and adversary tactics that exploit trusted access. The successful candidate will work closely across the cybersecurity, HR, and legal teams to develop bespoke detection rules, investigative playbooks, and response workflows tailored to address insider risk incidents.

Responsibilities:

• Act as an experienced insider risk incident responder, leading complex investigations into data misuse, policy violations, and insider-related security incidents from detection through resolution using tools such as insider threat management platforms, data loss prevention (DLP), and user and entity behavior analytics (UEBA).

• Develop advanced insider risk detection mechanisms to identify and raise alerts for potentially malicious, negligent, or high-risk behaviors originating from within the company’s workforce, contractors, or trusted partners.

• Continuously improve and fine-tune the insider risk detection portfolio to adapt to evolving behavioral patterns, emerging insider threat tactics, and changes in organizational workflows.

• Collaborate with Red Team efforts to simulate insider threat scenarios and design targeted detection strategies.

• Supervise and monitor the quality and accuracy of insider risk investigations to ensure consistent, evidence-based outcomes.

• Produce detailed reporting and trend analysis on insider risk incidents, behavioral anomalies, and investigative findings for executive and compliance stakeholders.

• Partner with security engineering and HR/legal teams to identify trends in insider risk detections and investigations, enabling proactive risk mitigation and security-by-design initiatives.

• Coach and mentor team members on insider threat detection methodologies, investigative best