Senior Insider Risk Analyst

Nice to Have

• Experience working in semiconductor, EDA, or engineering IP-intensive industries is highly preferred.
• Familiarity with engineering design automation tools and the data workflows they generate would be a significant advantage.
• Experience with enterprise storage platforms and storage-layer access controls/audit logging, as well as experience with VDI environments and session-based security controls (clipboard, drive mapping, print redirection), are also preferred.
• Knowledge of data access governance platforms and experience with network detection and response (NDR) platforms for network-layer threat detection would be beneficial.
• Familiarity with the Philippine Data Privacy Act (RA 10173) and its implications for employee monitoring and insider risk investigations is also preferred.
• Relevant certifications are a plus, including GIAC Certified Enterprise Defender (GCED), GIAC Cyber Threat Intelligence (GCTI), Certified Insider Threat Professional (CITP), security operations analyst certifications, SIEM platform certifications, and cloud security certifications.
• Key Performance Indicators On the investigations side, you will be measured by the number of proactive sweeps conducted per quarter, mean time from detection to investigation closure, and the quality rating of investigation packages as assessed by Legal and HR feedback.
• For detection engineering, success is measured by the number of new or tuned detection rules deployed per quarter, detection coverage percentage against the insider risk scenario matrix, false positive rate reduction quarter-over-quarter, and new data sources onboarded into the SIEM per quarter.
• At the program level, the target is zero insider risk scenarios with no detection coverage.
• For positions requiring access to technical data, Analog Devices, Inc. may have to obtain export licensing approval from the U.S.
• Department of Commerce - Bureau of