Lead Cyber Defense Engineer, ITC

WHO YOU’LL WORK WITHThis role is part of Corporate Information Security (CIS) and reports to the Director – Insider Threat ITC.  You’ll collaborate closely with:Insider Threat Operations Analysts, Data Protection Analyst and Data Protection Engineering teamsCorporate Information Security Cyber DefenseLegal, HR, Governance, Resilience, and CIS teamsWHO WE ARE LOOKING FORWe’re seeking a Lead Insider Threat Analyst. This role is pivotal to the success of our Insider Threat program, responsible for leading technical investigations and analyzing user activity data to detect potential data compromise or loss of intellectual property.The ideal candidate is a high-integrity, self-driven professional who thrives in a fast-paced, high-impact environment. You’ll bring a passion for operational excellence, strong communication skills, and a collaborative mindset to help elevate team performance and foster innovation. A key part of this role includes mentoring and developing junior analysts, promoting a culture of continuous learning and growth, and contributing strategic input to elevate the program’s maturity and enterprise impact - while maintaining the highest standards of confidentiality and discretion.What you bring:Bachelor’s degree in Intelligence, Social Sciences, Computer Science, or related field7–10 years of experience in insider threat, counterintelligence, or cyber investigationsExpertise in insider threat analysis, user activity monitoring, and DLP toolsFamiliarity with risk scoring models and data analytics platforms, DLP, UEBA, SIEM & Security toolsProven understanding of insider threat behaviors, motivations, and tacticsExperience supporting government or large corporate Insider Threat ProgramsStrong leadership and cross-functional collaboration skillsAbility to work independently while fostering team alignmentExceptional analytical, verbal, and written communication skillsWHAT YOU’LL WORK ONAs a Lead Analyst on the Insider Threat Operations (ITO) team, your responsibilities will include:Advanced Analysis & Assessment: Conduct all-source, cyber, and investigative analysis. Apply insider risk models and assign risk levels. Integrate data from network monitoring and analytics tools to identify trends, anomalies, and hidden patternsTechnical Leadership: Drive development of detection logic, alerting mechanisms, and investigative tooling tailored to insider threat scenarios. Collaborate with engineering and threat analysts to ensure scalable, actionable, and context-rich capabilities that accelerate response and reduce riskData Triage: Analyze anomalous events from User Entity & Behavioral (UEBA), Data Loss Prevention (DLP), and other security tools. Escalate and investigate events of concern and document findings thoroughly to support incident response, legal review, or disciplinary action as neededInvestigations: Lead and support insider threat investigations in accordance with established policies. Document findings in clear, actionable reports.Case Support: Provide analytic support for investigations, security inquiries, risk assessments, and adjudicative processes.Reporting & Briefings: Prepare and deliver high-quality reports and briefings that communicate investigative findings to stakeholders with clarity and precisionMentorship & Development: Guide and mentor junior analysts, fostering their technical and professional growth. Promote knowledge sharing, skill development, and team cohesionGlobal Collaboration: Partner with cross-functional and global teams to align insider threat strategies, share insights, and ensure consistent execution across regions. Promote the program’s value and influence across international stakeholders