Senior Security and Risk Ops Analyst

Job Overview

Intuit’s customers and stakeholders trust us with their most sensitive data and information and protecting this data is critical to meet our ethical, business, and regulatory obligations to customers and stakeholders. Given this priority, the Workforce Security team is currently driving strategic initiatives to deploy proactive, innovative, cutting edge, automation tools and capabilities leveraging machine learning, AI and Data Science to prevent, detect and investigate Workforce and data loss risks to protect Intuit classified data and accounts.

We are seeking a Senior Business Analyst to manage and develop complex policies utilizing rules, machine learning and outputs from statistical modeling to identify bad actor threat behaviors and to reduce malicious behavior within Intuit platforms ecosystem. This role will help drive holistic business and technology solutions making key contributions to shaping fundamental security technology and threat mitigation decisions for the program over a multi year horizon. 

Key responsibilities will include utilizing various analytical and statistical methods to identify Workforce risk patterns and develop new business rules that effectively detect Workforce risk providing proactive monitoring and emerging patterns to forecast Workforce risk scenarios. Additionally, you will develop Workforce Risk Enterprise Dashboards to provide a top level executive view on KPI metrics for insights.

This is an exciting time to join the Workforce Security team and play a critical role as we embark on this journey to build a best in class Workforce Trust Program to secure our customer and stakeholder data from insider risk.

Responsibilities

• Responsible for working with multiple systems and data domains to enable high fidelity risk detection and prevention through policy rule development and optimization associated to efficient response capabilities
• Partner with engineering stakeholders on the development of a holistic Workforce risk data platform that helps drive Workforce threat prioritization of risk use cases using AI/ML
• Collaborate closely with the Workforce Trust Program Lead to identify potential sources of Workforce risk, proactively monitor and triage latent and emerging patterns and forecast Workforce risk scenarios to protect Intuit classified data from inadvertent loss or exposure
• Collaborate closely with product, engineering and data stakeholders and be comfortable to push initiatives with strong data driven reasoning to justify prioritization
• Make data driven recommendations; leverage advanced analytics to conduct root cause analysis and correlate output from a variety of tools (Endpoint security, network security, data access/movement, user behavior) to continuously iterate, adapt and improve upon solutions
• Perform follow-me-home research, usability studies, testing and experimentation, and build close relationships with stakeholders
• Collaborate with Information / Cyber Security, Corporate Security, Program Management, Data Science and Engineering to investigate and resolve fraud, security, and identity escalations and identify/implement technology solutions to minimize such incidents
• Ensures solutions are scalable, repeatable and that end-to-end thinking is employed, as well as meet the expectations of the customer and Intuit. Development of Workforce Enterprise Dashboards used to provide top level view on KPI performance and drill down’s for insights
• Design, develop and manage real-time Workforce risk policy rules, tools and AI/ML models directly and in collaboration with stakeholder teams
• Automation of reports and development of self serve options for WTP reporting E2E
• Performs analysis and review of Workforce risk patterns to develop new business rules that effectively detect Workforce risk
• Utilize various analytical and statistical methods to provide insight into Workforce risk patterns resulting in improvements in Workforce risk detection
• In partnership with the business unit and business process owner, synthesizes business objectives and requirements to drive holistic business and technology solutions, inclusive of processes and data usage elements.
• Drives business processes and requirements adaptation to leverage out of the box system functionality and minimize customization as much as possible.
• Identifies and proposes trade-offs between short and long term solutions, and balances the needs of Intuit’s key stakeholders.
• Technology solution proposals on data collection platforms and contributions to business cases.
• Validate prototypes, system functional test, data conversion and post validation testing and execution of the plans.

Qualifications

• 5 years of Risk data/system analyst experience; Computer Science, Security and/or a related technical degree is preferred
• Experience with SPL, Python and SQL
• Knowledge of AI/ML to develop case generation, prioritization and help reduce operational overhead with automation
• Experience working with endpoint detection and response or incident response tools such as CrowdStrike, Palo Alto, Sentinel One or similar.
• Strong experience working with DLP tools such as Netskope, CyberARK and Secure Browser (ex. Island.io)
• Experience working in a matrixed organization and within a global enterprise software company or SaaS based business is a plus; Security and/or fraud credentials including CISSP, CFE, CCSP, CISA, CPA, CPP, PCI, CIPP, Carnegie Mellon Insider Threat PM Cert and/or PSP are a plus
• Experience working with Data Loss Prevention (DLP), Workforce threat detection and response, Cloud Access Security Broker (CASB) and Security Information and Event Management (SIEM) technology solutions to address risk as it relates to Workforce Threat, customer sensitive data exfiltration, identity access management, and/or fraud
• Obsession with data and analytics to solve problems and bring a track record of driving results through continuous improvement
• Experience with Agile development tools (Aha!, Jira)
• Experience developing and gaining acceptance for proposed solutions and business cases with senior level technical and and non-technical business leaders
• Risk Operational knowledge of investigations workflows, playbooks, escalations, Security Incident and Response
• Excellent written and verbal skills
• Strong time management skills