Company Overview

Job Description/Preferred Qualifications

Seeking a highly qualified Insider Threat specialist that thrives with the challenge of finding needles in the haystacks and making connections where others cannot. This role is an exciting opportunity to join a growing organization. Come join our Cybersecurity team in this critical role to protect KLA's critical assets!

Responsibilities

Help KLA identify, evaluate, and reduce risk. The Senior Insider Threat Analyst conducts in-depth analyses and correlation of data points to model insider threats and investigate risks to KLA. Duties include:

• Review logs and indicators to identify, analyze, document, and report on actions or behaviors as observed by security logs that are risky, do not align to company policies, or are otherwise deemed suspicious

• Correlate data points from various sources to support identification of anomalous behavior using critical thinking skills

• Alert those that need to know by providing clear and detailed information to help address the perceived risk and drive corrective actions and resolution after reporting

• Continually learn, adapt, and feed-forward those findings to what is and is not risky behavior based on prior notifications, changes in policies, and changes in security logs including applying lessons learned from past incidents

• Translate business risks to threat monitoring use cases for alerting, including conducting risk assessments on data sources for ingestion into monitoring tools

• Collaborate with partner teams to support investigations processes, provide technical expertise as needed, and communicate risks to the business

• Mentor and train other analysts on investigative techniques and analytical and technical skills

• May assist with sophisticated cybersecurity incidents, investigations, and maintaining chain of custody when needed to support legal requirements

Basic Requirements

• 8+ years in insider threat analysis, investigation, and mitigation

• Experience with user entity behavior analytics (UBA/UEBA) and data loss prevention (DLP) tools, such as Proofpoint

• Deep understanding and experience in security monitoring, identity and access management, digital forensic analysis, network security

• Experience with data analytics tools to identify trends and correlate data sources

• Ability to work with partners across the business and understand different perspectives

• Effective communication, along with interpersonal and team leadership skills

• Self-sufficient, motivated individual with the ability to calmly operate in high stress environment to meet goals in a timely manner

• Proficiency in Microsoft Office tools to analyze data and communicate findings

• Maintain awareness and follow data handling, safety, and security policy and procedures

Desired

• Experience leading teams and communicating to senior leadership and executives

• Experience working with security technologies such as Security Information and Event management (SIEM) and ticketing platforms

• Experience in cybersecurity incident response, digital forensics, and threat intelligence

• Ability to read, speak, and write in a foreign language where KLA conducts business

• Experience with programming languages, such as Python a plus

Minimum Qualifications

• Bachelor's Degree and eight (8) years of related work experience.

• This is a Hybrid Onsite opportunity based at our Midwest HQ in Ann Arbor, MI.

The company offers a total rewards package that is competitive and comprehensive including but not limited to the following: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.

KLA is proud to be an Equal Opportunity Employer. We do not discriminate on the basis of race, religion, color, national origin, sex, gender identity, gender expression, sexual orientation, age, marital status, veteran status, disability status or any other status protected by applicable law. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at to request accommodation.