6 days ago
Base Salary
$168k - $311k/yr
Responsibilities
- Build, test, deploy, and tune insider-threat detections across identity, endpoint, cloud, SaaS, collaboration, source-code, build-system, removable-media, and data-movement signals.
- Lead and support investigations involving unusual data movement, unapproved applications, external sharing, access anomalies, compromised accounts, and employee transitions.
- Collect and correlate data from endpoint, identity, cloud, source-code, collaboration, data-protection, and approved business sources to establish activity timelines.
- Develop automation, data pipelines, integrations, dashboards, and investigation tools to reduce manual work and improve case consistency.
- Operate and improve insider-risk and data-loss-prevention capabilities by assessing policy performance, detection coverage, alert quality, false positives, and case-management connections.
- Use hypotheses, threat models, test cases, version control, peer review, and performance measures to improve detection quality and address telemetry or control gaps.
- Present investigation findings that distinguish facts from inferences and explain confidence levels, data limitations, alternative explanations, and unanswered questions.
- Support evidence preservation, containment, escalation, and remediation while following investigative scope, access, confidentiality, auditing, and retention requirements.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Data Engineering, or a related field, or equivalent experience.
- At least 7 years of experience in insider threat, detection engineering, security operations, incident response, digital forensics, data protection, threat hunting, or a related security field.
- Experience conducting security investigations, including scoping, evidence collection, timeline development, activity analysis, documentation, escalation, and lessons learned.
- Experience with SIEM, DLP, UEBA, EDR, insider-risk management, identity security, case management, or security orchestration technologies.
- Proficiency in at least one of Python, Go, Java, JavaScript, or TypeScript, with experience building automation using APIs, structured data, source control, and testing.
- SQL, security-query, and data-analysis skills, including correlating incomplete or inconsistent data from multiple sources.
- Knowledge of identity and access management, endpoints, cloud services, collaboration platforms, SaaS integrations, data classification, source-code environments, and data-exfiltration methods.
- Experience translating insider-risk scenarios into telemetry requirements, detection logic, investigation workflows, controls, test cases, and performance measures.
- Ability to objectively assess activity, distinguish indicators from substantiated findings, avoid assumptions about intent, and explain evidence limitations.
- Clear written and verbal communication and experience working with technical, legal, privacy, HR, and business partners on sensitive matters.
- Preferred experience engineering insider-risk, data-loss-prevention, or endpoint data-protection capabilities and connecting signals to SIEM, orchestration, enrichment, or case-management systems.
- Preferred experience building security data pipelines, entity timelines, relationship models, behavioral baselines, or investigator-facing applications.
- Preferred knowledge of digital forensics, evidence preservation, chain of custody, incident-response coordination, and legal, privacy, and employee-relations requirements for workforce investigations.
- Senior candidates may bring experience leading projects, reviewing designs, and mentoring engineers or investigators.
Benefits
- Eligible for equity and benefits.
- Applications will be accepted at least until October 18, 2026.
Tech Stack
Categories
About Nvidia
Nvidia designs and sells GPUs and accelerated computing platforms for data centers, AI/ML, graphics, gaming, and automotive, monetizing through hardware, software platforms (CUDA, AI frameworks), and systems like DGX and networking. Customers include cloud providers, enterprises, researchers, and OEMs. Founded in 1993 and headquartered in Santa Clara, it is a public company traded on NASDAQ under NVDA.