Senior Insider Threat Investigator

What you'll do

• Perform high-complexity insider threat investigations by analyzing user activity, access patterns, logs, and behavioral data.
• Develop timelines, risk assessments, root-cause analyses, and evidentiary documentation for complex investigations.
• Coordinate investigative actions and communications to mitigate risks and protect sensitive information.
• Research and analyze potential insider threat risks, trends, and control gaps across assigned areas.
• Develop and enhance investigative playbooks, workflows, and response procedures.
• Monitor indicators of insider risk to support detection, escalation, and containment activities.
• Translate investigative findings into recommendations for process, service, and technical improvements.
• Communicate complex investigative methodologies, findings, and mitigation strategies to leadership and partners.

What we're looking for

• 3+ years of experience in insider threat programs, cybersecurity investigations, digital forensics, or risk analytics.
• Advanced knowledge of insider threat investigation methodologies, behavioral monitoring, and forensic analysis techniques.
• Experience with DFIR, SIEM, and investigative analytics platforms.
• Strong understanding of regulatory and control frameworks such as NIST, ISO 27001, and GDPR.
• Ability to apply data-driven insights to risk mitigation and program improvement.
• Strong written and verbal communication skills, including executive-level reporting.
• Ability to submit to a background investigation.