Senior Investigator, Cyber Security
Core
Lead and support investigations into cyber incidents, insider-risk alerts, data misuse, and policy violations, correlating evidence to distinguish benign activity from compromise or intentional misuse.
Role type
Senior IC cyber security investigator
Builds
Investigation summaries, findings, recommendations, and executive-ready updates
Domain
Cyber security / Insider risk / Threat intelligence
Required skills
Incident response, Security operations, Cyber investigations, Threat intelligence, Insider-risk investigations, SIEM, SOAR, EDR, DLP, Case management, Identity platforms, Endpoint security, Cloud security, Threat intelligence platforms, Evidence handling, Executive communication
Preferred skills
Bilingual communication, Cleared-environment experience, Operations security, Information security, Personnel security, Physical security, Intelligence, Compliance, Security program management
Technologies
SIEM, SOAR, EDR, DLP, UEBA, Cloud platforms, Network security tools
Responsibilities
Lead and support investigations into cyber incidents, insider-risk alerts, data misuse, and policy violations; Triage alerts, scope activity, identify affected users/systems, and prioritize based on risk; Prepare investigation summaries and executive updates; Apply incident response methods to assess suspicious activity and determine root cause; Correlate endpoint, network, identity, and cloud evidence to validate impact; Identify and assess insider-risk indicators across monitoring platforms; Monitor high-risk situations involving departures, role changes, and privileged access; Maintain complete case records from intake through closure; Preserve evidence integrity and chain of custody; Partner with Cyber Security, Legal, HR, and Compliance on sensitive investigations; Coordinate escalations and mitigation steps; Explain technical findings in clear business-risk terms.
Seniority
Senior, hands-on IC
