Principal, Insider Threat Analyst

Overview

Principal, Insider Threat Analyst

Bring your ideas. Make history.
BNY Mellon offers an exciting array of future-forward careers at the intersection of business, finance, and technology. We are one of the world's top asset management and banking firms that manages trillions of dollars in assets, custody and/or administration. Known as the "bank of banks" - 97% of the world's top banks work with us as we lead and serve our customers into the new era of digital.

With over 238 years of rich history and industry firsts, BNY Mellon has been built upon our proven ability to evolve, lead, and drive new ideas at every turn. Today, we're approximately 50,000 employees across 35 countries with a culture that empowers you to grow, take risks, experiment and be yourself. This is what #LifeAtBNYMellon is all about.

• Triage data of anomalous events collected by User Activity Monitoring (UAM) Tools, and other data analytics tools and sources to decipher underlying trends or uncover anomalies and discern obscure patterns and attributes.

• Conduct proactive hunts through enterprise networks, endpoints, or datasets to detect malicious, suspicious, or risky activities that have evaded detection by existing tools.
• Incorporate threat intelligence-driven or hypothesis-based insider threat hunting to identify and prioritize development of missing or ineffective detection capabilities to detect, prevent, and respond to cyber events originating from insider threats.
• Use analytics to pinpoint and prioritize threats found amongst large amounts of sensitive data from disparate data sources.

• Elevate events of concern, and produce proactive Insider Threat leads that document issues on computer misuse, various violations of policies, concerns, influence, stressors, threats to self or others, etc.
• Provide analytic case support to investigations, administrative or security inquiries, risk assessments, or other assessments, misconduct issues, and support to business lines. Analysts document all referral activities in written products and reports.
• Complete special analytical projects as directed by leadership. Prepare and present analysis, in the form of briefings and/or reports, to leadership.
• Assist in the proactive identification of new collection methodologies
• Execute, and maintain standard operating procedures (SOPs), playbooks and runbooks
• Create TTPs ((Tactics, Techniques, Procedures) for identifying insider threats and brief team members on emerging threats
• Collaborate with Insider Threat Analysts, APT Hunt, Red Team, Data Engineering and other operational and detection teams to develop innovative Insider Threat capabilities to further enhance our proactive and reactive analytical process

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required, advanced degree preferred
• 8-10 years of experience in information security or related technology experience required experience in the securities or financial services industry is a plus
• Experience with analytical problem solving and familiarity with conducting operations relating to insider threat, counterintelligence investigations, and/or counterespionage.
• Familiarity with data analytics tools used for insider threat information collection on computer networks or knowledge of other insider threat risk scoring data analytics tools and programs.
• Understanding of insider threat analysis, user activity data, UAM, and DLP data.
• Experience with the modus operandi of insider threat and associated capabilities and motivations.
• Experience in support of corporate or government Insider Threat Programs.
• Demonstrated leadership ability, including the ability to influence and motivate others in a cross-functional team (both directly and indirectly)
• Ability to establish an independent view, while effectively collaborating with peers in a team environment
• Strong analytical skills and experience creating and presenting executive reports and briefings
• Vision to anticipate problems and provide workable solutions.
• Strong verbal and written communication, as well as information-seeking skills
• Strong analytical and quantitative skills; ability to use data and metrics to drive recommendations
• Proficient in Microsoft PowerPoint, Word, Excel; Mac skills also highly preferred

• Fortune World's Most Admired Companies & Top 20 for Diversity and Inclusion
• Bloomberg's Gender Equality Index (GEI)
• Best Places to Work for Disability Inclusion , Disability: IN - 100% score
• 100 Best Workplaces for Innovators, Fast Company
• Human Rights Campaign Foundation, 100% score Corporate Equality Index
• CDP's Climate Change 'A List'