Standardized Job Description
Optomi, in partnership with a leading enterprise, is looking for a Senior IRM Analyst – UEBA Focus to join their growing Insider Risk Management team.
Position Summary: The Senior IRM Analyst will act as the subject matter expert for UEBA and behavioral analytics within the newly established Insider Risk program. This role involves designing, tuning, and evolving detection models, conducting complex investigations, and interpreting human behavior to assess true risks. The analyst will be instrumental in configuring Microsoft Purview IRM policies and conducting deeper investigations using Defender and Sentinel. What the right candidate will enjoy:
- Being part of a new and actively developing program
- Opportunities to contribute strategically to program architecture
- Collaboration with a growing team from 2 to 4 analysts
- 3–7 years in Insider Risk, UEBA, threat hunting, or related domains
- Advanced KQL proficiency
- Experience with Microsoft Purview Insider Risk Management and behavioral analytics
- Familiarity with forensic techniques and log analysis
- Own UEBA detection engineering within Microsoft Purview IRM
- Monitor, triage, and investigate insider risk alerts
- Write custom KQL queries from scratch
- Build and tune behavioral models and detections
- Apply structured analytic reasoning and produce clear written investigative assessments
- Leverage Defender and Sentinel for deeper technical investigations
