Insider Risk – Rule Management Engineer (f/m/x)
D.B. Group4 days ago
Bucharest, RomaniaMid Level / Senior
Responsibilities
- Translate insider-risk policies, use cases, and threat scenarios into actionable detection rules.
- Create, configure, maintain, and document behavioral indicators, risk models, scoring profiles, and rule logic.
- Design insider-threat scenarios involving data exfiltration, privilege misuse, shadow IT, anomalous data handling, and evasion behaviors.
- Perform impact assessments before production deployment and continuously monitor rule performance, alert accuracy, and telemetry patterns.
- Tune thresholds and behavioral indicators to improve detection fidelity and reduce false positives and alert fatigue.
- Audit rule sets and maintain alignment with business processes and emerging insider-risk trends.
- Collaborate with Insider Risk Management and Security Operations teams to test and validate use cases end to end.
- Integrate insider-risk alerts into SIEM/SOAR workflows and provide expertise for risk reviews, audits, and tabletop exercises.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Data Analytics, or a related field.
- 3–7 years of experience in cybersecurity, insider threat, insider risk management, SOC operations, or related fields.
- Hands-on experience with insider-risk platforms such as Microsoft Purview, DTEX, Proofpoint, or Code42.
- Proficiency with Python or query languages such as SQL, SPL, or KQL for data manipulation, analysis, and reporting.
- Strong understanding of behavioral analytics, telemetry, user activity monitoring, and data classification.
- Familiarity with Data Loss Prevention, User and Entity Behavior Analytics, and endpoint security technologies.
- Understanding of attack vectors, threat-actor methodologies, and data-exfiltration techniques.
- Strong written and verbal communication skills for documenting rules and working with non-technical stakeholders.
- CISSP, CISM, GCIH, CCSP, or similar certifications are preferred.
- Ability to use AI tools responsibly to improve productivity and workflows while applying critical judgment to data and AI outputs.
Benefits
- Private healthcare and life insurance with premium benefits and discounts for loved ones.
- 24 days of holiday, loyalty days, and bank holidays, including substitute weekdays for weekend bank holidays.
- Hybrid working model with 40% remote work.
- Flexible working hours.
- Meal vouchers, referral bonuses, retailer discounts, cultural and CSR activities, workshops, and other employee programs.
- Modern office with relaxing areas, continuous learning, coaching, and support from team experts.
- Support for mental health, physical health, illness, and life-crisis management.
About D.B. Group
D.B. Group is an Italian freight forwarder and logistics provider offering air, ocean, road, and rail transport, customs brokerage, and supply chain management for global shippers. Founded in 1980 and headquartered in Montebelluna, Veneto, it is privately held and operates through 79 subsidiaries with a worldwide partner network. The company delivers end-to-end forwarding and integrated logistics services, from consolidation and warehousing to door-to-door deliveries and trade compliance.