Senior Insider Threat Investigator

About the role

Complex insider threat cases sit with this role: building timelines, risk assessments and evidence from user activity, logs and behavioral data, then explaining the findings to legal, compliance and security leaders.

At a glance

What you will do

• Run the harder insider threat cases, reading user activity, access logs and behavioral data to build timelines and evidence
• Write up risk assessments, root cause findings and case documentation that hold up to scrutiny
• Carry out investigative steps and updates in line with the response plan and leadership guidance
• Check how well monitoring and investigative controls work, and record the results
• Help shape playbooks, workflows and response steps, and watch for risk signals that need escalation

What they look for

• Three or more years in insider threat work, cyber investigations, digital forensics or risk analytics
• Deep grasp of investigation methods, behavioral monitoring and forensic techniques
• Hands-on with DFIR, SIEM and analytics platforms used in investigations
• Clear writing and speaking, including reports for senior leaders