Insider Threat Subject Matter Expert (SME)

Job Type
Full time

Location:
Remote (Malaysia & India) Experience Level: 7–8 Years Position Overview We are seeking an experienced and proactive Insider Threat Subject Matter Expert (SME) to lead and enhance our enterprise insider threat defense, prevention, and response capabilities. In this role, you will be responsible for designing, deploying, and maintaining frameworks to detect, analyze, and mitigate risks posed by insider threats—including malicious, negligent, or compromised actors. As a key member of our global cybersecurity organization, you will collaborate closely with Cross-Functional Security Teams, Legal, HR, and IT to ensure sensitive data and critical corporate assets remain safe and compliant.

Key Responsibilities
● Program Strategy & Governance: ○ Lead, mature, and optimize the global Insider Threat Program framework, policies, and operational workflows. ○ Define and monitor key risk indicators (KRIs) and key performance indicators (KPIs) related to insider risk. ○ Ensure alignment with global security standards, privacy laws, and regional regulatory compliance requirements. ● Threat Detection & Behavioral Analysis: ○ Design, implement, and tune behavioral detection rules, risk-scoring models, and monitoring strategies using UEBA (User and Entity Behavior Analytics), SIEM, and DLP (Data Loss Prevention) tools. ○ Conduct complex threat hunting, anomaly detection, and deep-dive investigations into potential insider risk incidents. ● Incident Response & Investigation: ○ Serve as the primary technical contact and expert for high-risk insider threat investigations and escalation procedures. ○ Partner with Legal, Human Resources, Internal Audit, and Employee Relations to conduct thorough, objective,



and privacy-compliant forensic reviews and risk assessments. ○ Prepare clear, concise executive-level reports and evidence summaries for leadership and legal counsel. ● Collaboration & Stakeholder Management: ○ Educate and advise stakeholders across different regions on insider threat trends, mitigation strategies, and best practices. ○ Collaborate with technical teams (Security Operations, Identity & Access Management, Cloud Security) to strengthen access controls and reduce administrative exposure. Required Qualifications & Experience ●

Experience:
7–8 years of direct domain experience in cybersecurity, user behavioral analytics, data loss prevention, or insider threat management. ● Technical Expertise: ○ Deep technical hands-on experience with UEBA/SIEM platforms (e.g., Exabeam, Securonix, Splunk Enterprise Security, Microsoft Sentinel) and DLP technologies (e.g., Symantec, Forcepoint, Microsoft Purview). ○ Solid understanding of digital forensics techniques, log analysis, user access controls, and data protection practices. ● Analytical

Skills:
Strong analytical capabilities to synthesize disparate logs, user activity data, and behavioral cues into actionable risk assessments. ● Communication: Excellent verbal and written communication skills with proven experience presenting technical findings to non-technical executive stakeholders. ● Remote Collaboration: Self-motivated and capable of operating effectively in a fully remote, multi-timezone environment across Malaysia and India. Preferred Qualifications / Certifications ● Industry-recognized security certifications such as CISM, CISSP, CISA, CCFP, GCFA, GNFA, or specialized Insider Threat certifications (e.g., CERT Insider Threat Vulnerability Assessor/Manager). ● Prior experience handling cross-border data privacy regulations (e.g., PDPA, GDPR) during security investigations

📌 Insider Threat Subject Matter Expert (India)
🏢 Yoda Tech
📍 India