Insider Threat Investigator II
Core
Lead complex insider threat investigations and advance the Insider Threat Program to protect people, data, clients, and business operations from insider risks.
Role type
Senior IC insider threat investigator
Builds
Insider threat detection capabilities, investigative playbooks, and program enhancements
Domain
Corporate security / Insider threat / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
insider threat investigation, corporate investigation, cybersecurity, User and Entity Behavior Analytics (UEBA), Data Loss Prevention (DLP), digital forensics, incident response, threat-informed defense, MITRE ATT&CK framework, security technologies (EDR, SIEM, CASB, PAM, IPS)
Preferred skills
law enforcement or intelligence background, cloud security (AWS, Azure, GCP), scripting (Python, PowerShell, Bash, JavaScript), CERT ITPM, GCFA, CFCE, CFI, CFSR, CFE certifications
Responsibilities
Lead high-impact insider threat investigations from detection through resolution, identify emerging trends and improve investigative methodologies, transform complex data into actionable intelligence, drive collaboration across security, legal, HR, and business teams, develop innovative detection strategies and program enhancements
Seniority
Mid-Senior, hands-on IC
