Insider Threat Investigator
Core
Lead end-to-end insider threat investigations to monitor, detect, and mitigate risks to Workday's information systems and data integrity.
Role type
Senior Insider Threat Investigator
Builds
Enterprise threat mitigation processes, detection logic, and investigation procedures
Domain
Cybersecurity / Corporate Investigations / Intelligence
Deliverable
client delivery
Required skills
Insider threat investigation, counterintelligence, complex corporate investigations, SIEM platforms (Splunk, QRadar, Sentinel), UEBA tools (Exabeam, Proofpoint, DTEX, Purview), digital forensics, DLP tools, endpoint detection, threat assessment principles (CERT, CISA, NTTF), case management
Preferred skills
Federal law enforcement background (FBI, NCIS, AFOSI, ACIC), U.S. Intelligence Community or military experience, building/maturing formal insider threat programs, behavioral threat assessment, industry working groups participation
Technologies
Splunk, QRadar, Sentinel, Exabeam, Proofpoint, DTEX, Purview
Responsibilities
Conduct end-to-end insider threat investigations from detection to resolution, interview subjects and stakeholders, manage document review and preservation, execute investigative inquiries, coordinate with SIRT and Legal for evidence collection, establish investigative procedures
Seniority
Senior, hands-on IC
