Senior Security Engineer - Insider Threat

Citizens Financial Group is seeking a Senior Security Engineer focused on Insider Threat. In this hybrid role in Johnston, RI, you will help mature the organization’s Insider Threat Program by building detection logic, analyzing security and behavioral telemetry, and partnering with internal stakeholders to improve insider risk identification and response.

Location and Work Arrangement

• Location: Johnston, RI (hybrid)
• Work arrangement: Hybrid with 4 days onsite and 1 day remote in one of the approved hubs: Johnston, RI | Boston, MA | Marlton, NJ | Pittsburgh, PA | Phoenix, AZ | Irving, TX | Cleveland, OH
• Remote approval: Remote work requires executive approval
• Schedule: Monday through Friday, 8:00 AM to 5:00 PM
• Hours: 40 hours per week

Salary and Incentives

• Base salary range: USD 114,000 - 152,000 per year
• Incentive opportunity: Opportunity to earn additional incentive earnings
• Pay determination: Actual pay is based on factors including budget, work location, and relevant skills and experience

Role Summary

This position advances insider threat capabilities through security analytics, behavioral indicators, data analysis, and technology-enabled controls. The role includes assessing current program capabilities, developing detection logic and indicators, and collaborating across teams to operationalize insider risk processes and controls.

Responsibilities

• Assess existing Insider Threat Program capabilities, identify gaps, and develop technical and non-technical indicators to improve insider risk detection
• Develop and enhance analytics, detection logic, behavioral indicators, and reporting used to identify potentially risky colleague activity
• Evaluate, implement, configure, and optimize security technologies supporting insider threat monitoring, investigation, and response
• Analyze data and security telemetry from multiple sources to identify anomalous activity, behavioral patterns, and potential insider risk
• Use user and entity behavior analytics, security monitoring, threat intelligence, and related analytic methods to identify suspicious or abnormal activity
• Investigate complex patterns of user activity and distinguish potentially malicious or high-risk behavior from expected business activity
• Partner across Cybersecurity, Fraud, Human Resources, Legal, Risk, Technology, and other internal teams to develop and operationalize insider risk processes and controls
• Collaborate with internal technology teams to ensure enterprise platforms and colleague-facing tools provide appropriate data and telemetry to support insider threat and fraud detection
• Create, maintain, and enhance insider threat and fraud detection reporting using internal and external data sources
• Interpret results from security and fraud analytics to identify and escalate potential incidents involving insider threats, internal fraud, theft, data misuse, or misconduct
• Apply statistical and analytical techniques to improve anomaly detection, alert quality, detection accuracy, and investigative effectiveness
• Identify opportunities to reduce false positives and improve signal quality of insider threat detections
• Develop and maintain technical documentation, including detection methodologies, procedures, metrics, and program reporting
• Produce program metrics and insights on insider risk trends, control effectiveness, detection coverage, and areas needing additional focus
• Monitor evolving cyber threats, insider threat techniques, behavioral indicators, and emerging technologies that may affect the organization’s risk profile
• Communicate technical findings, emerging threats, and recommended actions to cybersecurity teams and business stakeholders

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field with 1+ years of relevant experience, or equivalent professional experience
• High school diploma or equivalent with 5+ years of relevant professional experience may be considered in lieu of a bachelor’s degree
• Understanding of information security concepts, cybersecurity practices, and regulatory considerations related to insider threat and data protection
• Understanding of enterprise security and networking technologies and their role in prevention, detection, investigation, and response for insider threats
• Experience analyzing security, behavioral, fraud, or related data to identify suspicious activity, anomalies, or potential risk
• Ability to analyze information from multiple data sources and translate findings into actionable security insights
• Strong analytical, investigative, and problem-solving skills
• Advanced proficiency with Microsoft Office: Outlook, Word, Excel, and PowerPoint
• Excellent verbal and written communication skills, including the ability to explain complex concepts to technical and non-technical stakeholders
• Ability to work independently while collaborating effectively across technical and business teams

Tools and Technologies

• Microsoft Office (Outlook, Word, Excel, PowerPoint)

Benefits

• Competitive pay
• Comprehensive medical, dental and vision coverage
• Retirement benefits
• Maternity/paternity leave
• Flexible work arrangements
• Education reimbursement
• Wellness programs
• Paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States

Background Check

Any offer of employment is conditioned on successfully passing a background check. This may include an initial credit check, motor vehicle record, public record, prior employment verification, and criminal background checks. Results are reviewed individually based on applicable legal requirements, considering the nature and severity of the background history and the job offered. Additional information will be provided as part of the offer process.

Awards and Recognition

• Dave Thomas Foundation’s Best Adoption-Friendly Workplace
• Disability:IN World’s Top Disability Inclusive Business
• Glassdoor - Best Place to Work in Consulting, Finance & Insurance
• Human Rights Campaign Corporate Equality Index 100 Award
• Newsweek America’s Most Charitable Company
• The Bankers - US Bank of the Year