Lead Insider Risk Analyst - 100% US REMOTE

Company Description

Experian is the world’s leading global information services company, unlocking the power of data to create more opportunities for consumers, businesses and society. We are thrilled to share that FORTUNE has named Experian one of the 100 Best Companies to work for. In addition, for the last five years we’ve been named in the 100 “World’s Most Innovative Companies” by Forbes Magazine. 

Job Description

Experian is looking for a Lead Insider Risk Analyst to join our Cyber Fusion Center Team.  The Insider Risk Analyst Lead will design, deploy, manage, automate, and mature processes to improve Experian’s global insider threat and data loss prevention programs by leveraging data analysis expertise using an array of analytical tools.  This role is responsible for driving efficacy of security operations and DLP controls through data analysis, testing, creating a centralized data exfiltration use case catalogue mapped to the MITRE ATT&CK framework, leading red-hatting exercises, conducting DLP precision monitoring, and refining use cases and associated exceptions.

This role will drive improvement of DLP detection processes, lead analysis of DLP tool efficacy and patterns, improve DLP detection models in close collaboration with the DLP Engineering Team, conduct proactive analysis for emerging insider and cyber threat trends based on cyber threat intelligence, and engage in purple teaming exercises to proactively identify and mitigate risks to Experian’s environment.

Duties include:

• Conduct data analysis by leveraging various analytical tools and interpret device and application logs from a variety of sources (e.g. Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures, etc.) to determine next steps for containment, eradication, and recovery of risk and data loss incidents.
• Engage with business leaders to identify key internal threat risk areas, and technical teams to define detection and mitigation strategies.
• Work with partner teams to establish accountability, responsibility and engagement models for internal threat detection and response services. 
• Maintain a DLP assessment plan that aligns to how Experian operates and matches the requirements of the Cyber Fusion Program.
• Build processes to capture and publish assessment results that enables remediation plans that align with Experian’s Cyber Fusion roadmap.
• Work with stakeholders to build plans of actions and milestones and track progress against gaps.

Qualifications

• Bachelor's Degree in Data Analytics, Data Science, Information Systems or relevant field.
• Minimum 10 years of experience working in a cyber security investigation field.
• 5+ years’ experience working in consulting capacities. Results-orientated mindset. Strong organization and quality management skills to handle multiple tasks and control expectations
• Experience with cross-organizational collaboration and negotiation.
• Outstanding analytical and conceptual skills.
• Broad knowledge of cybersecurity technologies.
• Experience with writing scripts and proficiency in Splunk. 
• Experience in defending against insider threats by utilizing UEBA and DLP tools. 
• Experience in implementation of cybersecurity, network defense, and investigative frameworks.
• Experience in interpreting data from network security tools and infrastructure technology such as SIEM and proxies.
• Strong data analytic skill research skills, with the ability to spot anomalies and patterns, conduct link analysis, and draw relevance to the enterprise. 
• Experience writing and presenting briefings on investigations to all levels of staff and management in high-pressure environments.
• Knowledge of the cyber threat landscape, including types of adversaries, campaigns, and how insider and cyber threats are fueled. 
• Knowledge of SOC environment methodology to include threat monitoring, intrusion detection, incident response, and analysis as well as a solid understanding of Cyber Fusion Center
• Process driven, and has eye for detail, automation, and efficiency to improve programs/processes.
• Business-fluent written and spoken English language skills. Excellent written and verbal communication skills with the ability to effectively tailor communication of technically complex issues to various audiences.
• Certifications- CISSP, GCIH, SANS, GIAC preferred.

Additional Information

Our uniqueness is that we truly value yours.

Experian's culture, people and environments are key differentiators. We take our people agenda very seriously. We focus on what truly matters; diversity and inclusion, work/life balance, flexible working, development, engagement, collaboration, wellnes