Insider Risk Investigator - CTJ - Top Secret
Core
Execute end-to-end insider risk investigations including evidence development, technical analysis, and documentation of findings to support root cause analysis and actionable insights for stakeholders.
Role type
Senior IC insider risk investigator (cybersecurity)
Builds
Investigative findings and insights for security, legal, and compliance stakeholders
Domain
Cybersecurity / Insider Risk / Threat Detection
Required skills
Threat modeling, SOC detection, threat analytics, SIEM, incident response, root cause analysis, evidence-based conclusions, detection logic development, cross-functional collaboration
Preferred skills
Programming (Python, PowerShell, SQL, KQL), Azure cloud environments, Identity and Access Management, Red Team, Penetration testing, DevSecOps, investigative standards, evidentiary principles
Technologies
Python, PowerShell, SQL, KQL, Azure
Responsibilities
Execute end-to-end investigative cycle including evidence development and technical analysis; Contribute to development and refinement of detection logic and investigative triggers; Collaborate with investigators, legal, HR, security, and compliance partners; Ensure alignment with established processes and minimize duplication of effort; Translate technical investigative activity into clear, structured findings and insights.
Seniority
Senior, hands-on IC
