Senior Manager - Insider Threat

WHAT YOU DO AT AMD CHANGES EVERYTHING

We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences - the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world's most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives.

AMD together we advance_

THE ROLE: We are seeking a highly experienced and passionate Senior Security Manager to join our team. You'll be the mastermind behind insider threat and threat detection, leading the overall team to ensure awareness, compliance, and industry leading programs in the area of insider threat and threat detection engineering.

THE PERSON:

The ideal candidate will possess strong multi-tasking skills and passion for details, as well as thinking one step ahead of cyber-criminals. You should be well-prepared to thrive in a fast-paced environment, possessing good interpersonal, leadership and communication skills.
KEY RESPONSIBILITIES:

Program Strategy & Governance

• Define and implement the insider threat charter, program roadmap, and risk appetite statement.
• Establish and maintain KPI/KRI dashboards to track program performance and risk indicators.
• Ensure compliance with industry regulations and frameworks (e.g., NIST 800-53, D3FEND).

Detection Engineering

• Design and optimize insider threat detection logic using DLP, UEBA, and behavioral analytics.
• Develop and fine-tune SPL correlation searches, risk-based alerting (RBA), and notable event rules within Splunk.
• Build and maintain a content library with version control, peer reviews, and regression testing.

Analytics & Threat Hunting

• Perform proactive threat hunts across endpoint, cloud, and SaaS telemetry (e.g., O365, Okta, CrowdStrike).
• Leverage ML models and statistical baselining to reduce false positives and enhance signal fidelity.

Incident Response & Investigation

• Lead end-to-end handling of insider threat alerts: triage, containment, investigation, and documentation.
• Coordinate cross-functional investigations with Legal, HR, and Compliance.
• Prepare executive-level incident summaries, root cause analyses, and remediation plans.

Tooling & Automation

• Integrate and automate response workflows using SOAR platforms (e.g., auto-enrichment, account lockdown).
• Pilot and deploy new detection technologies and logic to stay ahead of evolving threats.

Training & Awareness

• Develop and deliver insider threat awareness training across the organization.
• Promote a culture of security accountability and vigilance among employees.

Team Leadership

• Lead and mentor a team of investigators and analysts.
• Foster close collaboration with Cyber Defense, Legal, HR, and Physical Security teams.

PREFERRED EXPERIENCE:

• Extensive cybersecurity experience, with multiple years leading an insider threat or detection engineering function.
• Strong command of insider threat detection tools, DLP/UEBA technologies, and data exfiltration controls.
• Advanced proficiency in SPL, CIM normalization, and RBA strategies using Splunk ES.
• Demonstrated success in writing and optimizing >100 correlation searches with <5% false-positive rate.
• Familiarity with the MITRE ATT&CK and D3FEND frameworks.
• Scripting experience in Python or PowerShell for automation and data enrichment.
• Exceptional communication skills; ability to brief executives and support HR/legal proceedings when necessary.

• Background in digital forensics or incident response.
• Industry experience in sectors with elevated insider risk (e.g., semiconductor, financial services).

ACADEMIC CREDENTIALS:

• CISSP, GIAC GCIA/GSOM, or Splunk ES Admin certification.

LOCATION:

Austin, TX

#LI-MF2

#LI-HYBRID

Benefits offered are described: AMD benefits at a glance.

AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants' needs under the respective laws throughout all stages of the recruitment and selection process.