Ally Financial Careers

At Ally, you get a startup feel, but experience the benefits of a company that’s worked out the kinks and is fulfilling its purpose. We’re always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions. To read more about what our tech team does, be sure to visit our tech blog at ally.tech

We are seeking a highly skilled and motivated Senior Insider Threat Analyst who is passionate about protecting sensitive information. You will play a crucial role in developing and maintaining an effective insider threat program in accordance with industry best practices and regulatory requirements. You will work closely with our partners in information security, technology, fraud, human resources, privacy, risk and other areas to mitigate the risk of destruction, loss or exposure of sensitive Ally information. You will establish and maintain positive and productive relationships through ongoing dialogue with technology leaders, management and business partners.

• Conduct in-depth analysis of information received from disparate data sources
• Communicate findings, risks and gaps to both technical and non-technical program stakeholders
• Analyze complex datasets, develop rules for detecting risk and make accurate assessments
• Make recommendations to enhance detective and preventive controls
• Create analytical dashboards to assist with research, threat hunting and investigations
• Leverage an array of security technologies to develop a holistic understanding of potential high-risk behavior
• Share actionable information with organizational leadership to assist with and facilitate informed decision-making
• Assist in the development and maintenance of internal processes and playbooks
• Identify new tactics and techniques that could be used by insider threats
• Evaluate data sources and use cases for consideration in the improvement and expansion of the team’s detection capabilities
• Participate in the development of a risk-based user behavior analytics (UBA) tool
• Perform threat hunts to proactively identify risks in the enterprise environment
• Collaborate with other teams in information security (SOC, CSIRT, cyber threat intelligence, red team, engineering, etc.)

• 3+ years of hands-on experience in data analysis, technical investigations, insider threat, incident response, threat hunting, digital forensics, counterintelligence, fraud, data loss prevention and/or related information security disciplines
• 3+ years of hands-on experience with insider threat technologies like DLP, UBA, UAM, EDR, etc.
• Experience with Splunk or a similar Security Information and Event Management (SIEM) tool
• Experience with CrowdStrike or a similar Endpoint, Detection and Response (EDR) tool
• Familiarity with NIST and/or MITRE security frameworks
• CISSP, CISM, CISA, CRISC, CFE or comparable certification(s)
• Bachelor’s degree in information technology, computer science, or equivalent experience