The Threat Detection and Response Team (TDR) is focused on automating security detection, responding to security incidents, and working with partner teams to build capabilities that support the security incident response lifecycle. This is the front-line team that detects, investigates, and responds to security threats and malicious activity against Airbnb's data, systems and infrastructure.

To further increase our coverage, the team is looking to build a mature and world-class insider threat program. This is a key role to implement and execute our vision for insider threat detection capabilities while working closely with other team members. As a security engineer, you will have direct impact building capabilities for a new program through influence and technical contributions.

Must have quantitative experience or experience with statistical modeling.

Insider Threat Security Engineer

Primary Focus

• Build insider threat detection capabilities for Airbnb.

• Develop anomaly detection solutions for internal user activity.

• Work on distributed security analytics projects.

Responsibilities

• Build anomaly detection pipelines.

• Develop machine learning workflows for insider threat detection.

• Write distributed Python applications.

• Work extensively with Elasticsearch.

• Develop statistical models to identify anomalous behavior.

Must Have Experience

• PySpark/Spark.

• Machine learning pipeline development.

• Anomaly detection systems.

• Statistical modeling.

Preferred Experience

• Quantitative analysis or data science background is a plus.

Minimum Requirements

• 5+ years of hands-on in-depth knowledge and technical experience in security operations including detection engineering, threat hunting, incident response, digital forensics, and/or threat intelligence.
• Bachelor's degree in a related technical field or equivalent practical experience.
• Exposure to data science and analytics solutions applicable to the insider threat detection space.
• Experience with Insider Threat technologies (Data Loss Prevention solutions, UEBA, ).
• Foundational understanding of the relationship between insider threat and Incident Response, including how to effectively coordinate responses to insider threat incidents.
• Mid-level knowledge of insider threats within B2C companies, with a focus on security challenges specific to this industry.
• Knowledge and familiarity of the Cyber Kill Chain Framework and MITRE ATT&CK Framework and how these apply to the insider threat landscape.
• Experience automating security detection and response.
• Experience in AWS services (EC2, S3, Lambda, RDS) preferred
• Self-motivated and creative problem-solver able to work independently with minimal guidance.
• Ability to work calmly and collaboratively in critical high-stress situations with expediency.
• Outstanding organizational, prioritization, and multitasking skills.

By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively “Judge”) to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.