Senior Insider & Data Risk Analyst
Alpaca provides developer APIs for stock, options, and crypto trading, enabling businesses and developers to build trading applications and automate investment strategies.
Maintainer signals as of 8/14/2026
Funding history
Projects
About Alpaca
Alpaca helps developers and businesses access financial markets through API-first infrastructure for stock, options, and cryptocurrency trading. Users can build algorithmic trading strategies, create investing applications, and integrate brokerage services into their platforms.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You own insider risk investigations from triage through closure and mature insider risk management and data loss prevention capabilities. You investigate data misuse and exfiltration across source code, cloud services, applications, and trading systems; tune detections and DLP rules; assess AI-related data exposure; maintain risk registers; support audits; and produce clear reports for leadership.
Requirements
- 4+ years in insider risk, DLP operations, digital forensics, or security investigations
- Hands-on case management involving sensitive personnel matters
- Hands-on experience operating DLP in SaaS and endpoint environments
- Experience tuning DLP rules to improve signal quality
- Experience with workflow automation, AI, or SOAR platforms
- Understanding of data classification and data governance
- Working knowledge of SIEM and log analysis, including ELK/Elastic or Splunk
- Familiarity with NIST CSF, ISO 27001, SOC 2, GDPR, and APPI
- Strong written communication for investigation reports, case documentation, and executive summaries
- High integrity and discretion when handling confidential information
- Ability to work across People/HR, Legal, Compliance, Engineering, and IT
- Digital forensics or eDiscovery experience
- Experience with UEBA or insider risk detection platforms
- Scripting or automation for detections and data analysis using Python or SQL
- Experience with major cloud platforms
- Experience supporting SOC 2, ISO 27001, or regulatory audits
- Certifications such as GCFA, GCFE, CISSP, CISM, CIPP, or CFE
- Experience in security operations or incident response
Responsibilities
- Own insider risk investigations from triage through closure
- Mature insider risk management case processes and workflows
- Operate and tune data loss prevention tooling
- Mature data classification and align DLP controls to sensitivity levels
- Investigate data exfiltration, misuse, and policy violations
- Build and tune detections and monitoring
- Investigate risks across source code, cloud services, third-party applications, Slack, and trading systems
- Partner with People/HR, Legal, Compliance, and IT on sensitive cases
- Assess unauthorized AI tooling and sensitive data exposure
- Use agentic AI to mature the insider risk program
- Lead insider and data risk assessments
- Maintain risk registers
- Support internal and external audits and regulatory requirements
- Contribute insider risk and data handling content to security awareness and training
- Serve as the Security team's insider risk escalation point
- Mentor others on investigations and casework
- Monitor developments in insider risk, data protection, privacy, and financial services regulation
Benefits
- Competitive salary and stock options
- Health benefits
- One-time USD $500 new-hire home-office setup
- USD $150 monthly stipend via a Brex Card
