Remote Cybersecurity Analyst

Job Description

The Cybersecurity Analyst – Insider Risk Analytics will provide specialized technical and analytical support to Experian's global Insider Risk Management Program within the Cyber Fusion Centre. The role focuses on enhancing insider risk detection capabilities, supporting investigations, developing analytical use cases, and improving operational efficiency through advanced data analysis and automation.

The contractor will analyze and correlate complex datasets across multiple security technologies, develop detection logic, build dashboards and queries, and automate analytical and investigative processes. The position requires strong hands-on technical expertise in SIEM, UEBA, DLP, scripting, and data analytics. The role will also support proactive analysis of emerging insider and cyber threat trends and collaborate with internal teams to identify opportunities to improve detection accuracy and investigative effectiveness.

Skills and Requirements

Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent practical experience. Minimum 3-4 years of experience in cybersecurity investigations, security analytics, insider risk, or a related technical security discipline. Hands-on experience using SIEM, UEBA, and DLP technologies to analyze security events, investigate suspicious activity, and identify potential insider threats. Demonstrated ability to independently develop complex SIEM queries, correlation searches, dashboards, and analytical content using YARA-L, SPL, KQL, SQL, or equivalent query and detection languages. Experience analyzing and correlating large datasets across multiple security technologies to identify anomalies and behavioral patterns. Proficiency in scripting or programming languages such as Python, PowerShell, or equivalent technologies to automate analytical and investigative workflows. Experience with security monitoring, threat detection, incident response, and investigative processes within a SOC or similar cybersecurity environment. Strong analytical and problem-solving skills, with the ability to investigate complex technical issues and translate findings into actionable insights. Knowledge of insider and cyber threat trends, detection techniques, and opportunities to improve monitoring and analytical capabilities. Strong written and verbal communication skills, including the ability to explain technical findings to investigative teams and other stakeholders. Business-fluent English required. Experience supporting enterprise insider risk or data loss prevention programs. Familiarity with Google Security Operations (SecOps), including YARA-L detection logic and advanced security event analysis. Experience developing specialized dashboards, analytical workflows, or automated investigative solutions. Relevant certifications, including CERT Insider Threat Program Manager (ITPM) Certificate, Global Counter-Insider Threat Professional (GCITP), CISSP, GCIH, or other relevant GIAC certifications or SANS cybersecurity training.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].