Insider Threat Investigator III

What you'll do

• Lead high-impact insider threat investigations from initial detection through final resolution.
• Identify emerging trends and improve investigative methodologies to advance the Insider Threat Program.
• Develop advanced detection capabilities, tools, and high-fidelity alerting systems.
• Transform complex data into actionable intelligence to inform business decisions and strengthen security posture.
• Create innovative detection strategies and investigation playbooks to enhance organizational resilience.
• Coordinate with legal, HR, and digital forensics teams to align efforts and accelerate case resolution.

What we're looking for

• 3 to 5 years of insider threat, corporate investigation, cybersecurity, or related investigative experience.
• Proven ability to manage complex cases from initial assessment through closure and present evidence clearly.
• Knowledge of UEBA, DLP, digital forensics, incident response, threat-informed defense, and the MITRE ATT&CK framework.
• Experience with security technologies including EDR, SIEM, CASB, PAM, and intrusion prevention systems.
• Strong communication skills and a collaborative, analytical approach to decision-making in complex situations.
• 5 to 7 years of insider threat experience from law enforcement, intelligence, military, or corporate backgrounds is preferred.
• Experience securing cloud environments across AWS, Azure, or GCP with relevant certifications is preferred.
• Proficiency in scripting languages like Python, PowerShell, Bash, or JavaScript for automation and data analysis is preferred.