MassMutual yra finansinių paslaugų ir draudimo bendrovė, padedanti asmenims, įmonėms ir finansų specialistams planuoti ilgalaikį finansinį saugumą. Jos paslaugos apima gyvybės, neįgalumo ir ilgalaikės priežiūros draudimą, taip pat anuitetus, investicinius produktus, pensijų planavimą, tarpininkavimo paslaugas ir finansinio planavimo priemones. 1851 m. įkurta bendrovė derina draudimo apsaugą su turto valdymo ir pensijų sprendimais, daug dėmesio skirdama finansiniam stabilumui, atsakingam valdymui, tvarumui, įvairovei ir poveikiui bendruomenei. Plati jos veikla apima komandas, dirbančias draudimo, finansų, finansinių technologijų, investicinių paslaugų ir susijusiose įmonių funkcijų srityse.
Senior Insider Threat Consultant, Critical Asset Protection
Identify human-driven cyber risks and help protect MassMutual’s critical assets. Analyze access, behavior, and investigations across enterprise security environments.
Aprašymas
- Identify and prioritize critical assets for enhanced monitoring and protection.
- Analyze how critical assets are accessed, used, and shared across the enterprise.
- Map connections among identities, access privileges, business processes, and critical assets.
- Locate critical assets across cloud, SaaS, on-premises, and third-party technology environments.
- Map the business processes, applications, and operational dependencies that support critical assets.
- Find exposure pathways, concentration risks, and control gaps.
- Set protection requirements according to asset criticality and business impact.
- Assess behavioral and technical indicators of insider risk.
- Spot activity patterns that may signal misuse or mishandling of critical assets.
- Conduct and support complex insider threat investigations.
- Correlate identity, access, asset, and behavioral signals from multiple data sources.
- Monitor deception environments and analyze signals from adversary interactions.
- Work with detection engineering and security operations to build and refine insider threat detection logic.
- Help tune enterprise security tools.
- Support early warning frameworks and proactive risk identification.
- Document analytical findings and cases clearly and defensibly.
- Support executive reporting and enterprise risk visibility.
- Work with Cyber Operations, Detection Engineering, Human Resources, Legal, Privacy, Compliance, Fraud Operations, and business stakeholders.
- Help advance MassMutual’s enterprise insider threat program.
Reikalavimai
- At least 8 years of experience in cybersecurity, insider threat, investigations, intelligence analysis, data protection, enterprise architecture, or a related field.
- At least 2 years of experience collaborating across security, HR, Legal, Privacy, business, or investigative teams.
- Experience supporting or developing an Insider Threat Program.
- Experience supporting critical asset, information, or data protection, or human risk management initiatives.
- At least 2 years of experience identifying critical assets, assessing business impact, analyzing operational dependencies, or mapping business processes.
- Experience in business process analysis, system dependency mapping, technology assessments, or enterprise architecture reviews.
- Experience building or supporting Crown Jewel Analysis, Cyber Risk, or Cyber Resilience programs.
- Ability to explain technical environments in terms of business risk and operational impact.
- Experience conducting cyber, digital, fraud, employee misconduct, or insider threat investigations.
- Experience analyzing logs, endpoint telemetry, identity activity, access patterns, and behavioral signals.
- Practical experience contributing to detection use cases, monitoring strategies, investigative workflows, or security content development.
- Experience identifying, classifying, mapping, or protecting sensitive information or critical assets.
- Strong understanding of identity and access management, privileged access, trust relationships, and access governance.
- Experience with SIEM, EDR, UEBA, DLP, insider risk management, identity security, and security analytics platforms.
- Experience developing, tuning, or validating detection logic across endpoint, identity, network, and data protection technologies.
- Experience analyzing user behavior and detecting anomalous or high-risk activity by correlating multiple data sources.
- Familiarity with deception technologies, cyber deception strategies, or adversary engagement techniques.
- Experience working in a highly regulated environment, such as financial services.
- Professional certifications such as CISSP, CISM, GIAC, CDLP, GCFA, GCIH, or equivalent.
- Degree in cybersecurity, intelligence studies, psychology, criminal justice, information systems, or a related field.
Privalumai
- Competitive salary.
- Incentive and bonus opportunities.
- Bonus target or variable incentive compensation component.
- Industry-leading pay and benefits.
- Learning and development opportunities.
- Internal networks that support ongoing growth and skill development.
- Employee-led communities and forums for connection, learning, and inclusion.
- Collaborative, inclusive, energetic, and diverse culture.
- Clear ownership and accountability.
- Accommodation support during the application process.