Senior Cybersecurity Analyst - Insider Threat

The pay range is $85,500.00 - $153,900.00

Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

JOIN TARGET CYBERSECURITY AS A SENIOR ANALYST - INSIDER THREAT

About Us

Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.

As a Senior Insider Threat Analyst, you will be responsible for the research, analysis, production, and dissemination of information relevant to protecting the safety and security of personnel, brand, and operations at Target. This role will triage event data and analyze insider threat program alerts to conduct threat analysis. You will use comprehensive understanding of various collection methods and platforms to explore new data sources, build effective queries, and combine information from disparate sources.

Responsibilities:

• Conduct comprehensive investigations and analysis in support of the insider threat mission

• Collect and analyze available program data to evaluate insider threat risk to Target infrastructure, programs, and operations

• Triage event data associated with indicators of data exfiltration, data destruction and other key indicators of concern

• Conduct internal investigations working with Cyber Security, HR, Legal, Physical Security, and external partners based on information derived from internal and external sources

• Utilize network monitoring, data analytic, and other tools (Splunk/UEBA/SIEM/DLP) to identify anomalous activity, initiate investigations and decipher underlying trends

• Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines

• Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders

• Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations

• Identify and provide recommendations on ways to improve the insider threat program

About You

• 4-year degree or equivalent experience

• 3+ years' of experience in information security, preferably in a role focused on insider threat, data loss prevention or security operations

• Strong analytical skills with the ability to interpret complex information and draw actionable insights

• Experience using standard insider threat tools including Splunk, UEBA, SIEM and DLP platforms

• Basic understanding of insider threat program missions, internal stakeholders, and indicators of insider threats

• Basic familiarity with continuous risk assessment and risk-scoring concepts

• Investigation experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing, and reporting findings to internal and external stakeholders

• Excellent written and oral communication skills, with the ability to produce clear and concise reports

• Highly organized with a strong attention to detail

This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target’s needs. A Hybrid/Flex for Your Day work arrangement means the team member’s core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more