Insider Risk Operational Analyst

Key Skills

Cyber Security, Data management, Effective communication skills, Presentation skills, Project management, Scrum Agile Methodology, Splunk, Statistics

Job Description

We are changing the world with:

• Trusted products that accelerate drug discovery, development, and delivery to save lives
• Damage-resistant cover glass to enhance the devices that keep us connected
• Optical fiber, wireless technologies, and connectivity solutions to carry information and ideas at the speed of life
• Precision glass for advanced displays to deliver richer experiences
• Auto glass and ceramics to drive cleaner, safer, and smarter transportation

Corporate Investigations & Intelligence: As part of the Global Security Organization, Corporate Investigations & Intelligence is continually focused on raising awareness, refining processes, and utilizing forward thinking risk remediation and analytic techniques to proactively protect Corning’s People, Property, and Values. The Insider Risk program, a part of Investigations and Intelligence, takes a holistic approach to deter, detect, mitigate, and respond to risk and potential harm caused by persons with authorized knowledge of, or access to, Corning assets through increased risk awareness, robust data monitoring, expanded risk analysis capabilities, and cross-company partnerships. This role requires a highly curious technical analyst to support the Insider Risk analytic team in identifying and responding to high-risk activity and anomalous behaviors that may be indicative of harmful insider activity, including intellectual property theft, espionage, fraud, sabotage, and unauthorized data disclosure.

Daily Responsibilities Include:

• Primary analyst responsible for identifying and monitoring anomalous or high-risk behavior; conduct in-depth analysis of technical and non-technical information from a variety of sources to identify indicators of potential intellectual property theft or other high-risk activities; determine and assign risk levels; and document and escalate incidents as appropriate
• Lead the coordination with key partners and technical experts to develop, implement, and refine proactive anomaly and risk detection tools; act as insider risk subject matter expert to identify and define potential risk indicators and develop activity risk scores
• Identify tactics, techniques, and procedures (TTPs) and broader industry trends to develop informed risk detection and response strategies; investigate and decipher underling root causes to target mitigation efforts
• land and carry out tactical risk mitigation operations; coordinate across key partners to implement and manage proactive measures in anticipation of high-risk scenarios
• Provide insider risk subject matter expertise and analytic support to corporate investigations
• Develop and collect metrics to support organizational requirements, measure progress and growth, and identify areas for improvement
• Support initiatives to improve the overall security culture and posture within Corning

Required Skills / Qualifications

• Bachelor’s degree in computer science, information security, data science, or related field, or equivalent military or industry experience
• 4+ years’ experience in information security, incident response, or intelligence or investigative roles
• Strong analytic, threat hunting, and problem-solving skills; familiarity with data analysis tools and techniques
• Understanding of insider threat & cybersecurity principles, risk indicators, open-source analytic tools and techniques, and user activity & DLP data
• Experience with Splunk (preferred) or other SIEM-type platform
• Strong communication skills; ability to provide precise, clear, complete, and contextualized report writing and data analysis
• Ability to identify and prioritize risk; effectively triage urgent and or high-risk matters in an effective and objective manner
• Excellent interpersonal communication skills, including the ability to build working relationships with investigative team members, internal, and external stakeholders
• Demonstrates an ability to communicate effectively and tactfully with diverse groups of individuals at varying levels of technical sophistication
• Comfortable working in a highly flexible and adaptive team environment; ability to excel in environments that require urgency, accuracy, and sound judgement
• Ability to handle confidential and sensitive information with appropriate discretion and confidentiality
• Qualified to work with ITAR or otherwise federally regulated materials
• Willing to support Corning Values, particularly Quality, Integrity, and the Individual

Desired Skills:

• Experience applying threat and data modeling, advanced data correlation, and statistical analysis to develop alerts, notable events, investigative dashboards, and metrics driven reports.
• Understanding of insider threat analysis, UBA/UEBA tools or platforms
• Familiarity with case management tools and practices
• Experience with data management, aggregation, and storage (warehousing or unstructured systems)
• An understanding of Corning’s business and assets
• Project management, Agile/Scrum, or Performance Excellence experience

Location And Travel:

• Corning NY is preferred; REMOTE option available
• Travel is negligible

This position does not support immigration sponsorship.

The range for this position is $98,208.00 - $135,036.00. Starting pay for the successful applicant is dependent on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education. The benefits available for this position include medical, dental, vision, 401(k) plan, pension plan, life insurance coverage, disability benefits, and PTO.