Lead Analyst - Digital Investigations, Analytics & Insider Threat

GSK India; Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

GSK India is seeking a Lead Analyst for Digital Investigations, Analytics & Insider Threat. The role is a senior hands-on contributor driving insider threat operations and helping build an agentic AI framework to automate prevention, detection and response.

The team covers digital forensics, investigative analytics and risk assessment across business units. The position requires experience in digital investigations and a strong track record of analytical delivery, with the opportunity to

Qualifications

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Practical hands-on experience in the relevant cyber security domain.
• Demonstrated ability to deliver work independently to a high standard.
• Strong attention to detail in analysis and documentation.

Responsibilities

• Run insider threat investigations and detection operations as a senior hands-on contributor.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Perform statistical analysis of insider events to identify patterns, trends and control gaps.
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
• Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Participate in developing the team s agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI-generated outputs against real investigations, and feed analyst insight back into the models.
• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.

Skills

Digital Investigation

Insider Threat Mitigation

Investigative Analysis

Forensic Data Analysis

Incident Management

Security Monitoring

Security Operations

Cloud Security

Cyber Threat Intelligence

Tools

DLP

UEBA

EDR

SIEM

Forensic Imaging Tools

Case Management Platforms

Job description

Job Summary

GSK remains committed to achieving bold commercial ambitions for the future. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Job Purpose:

The Lead Analyst, Digital Investigations, Analytics & Insider Threat will deliver the teams work and act as a senior hands-on contributor within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus. This is a hands-on analytical role that runs current insider threat operations and participates in developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.

About the Team

The Digital Investigations, Analytics and Insider Threat team runs GSK s insider threat program end to end, detecting, investigating and responding to threats from those who already have authorised access, and protecting GSK intellectual property and confidential business information from insider risk. The team also covers digital forensics and investigative analytics in support of insider threat and related casework. Alongside running current operations, the team is building an agentic AI framework to optimise and automate the prevention, detection and response to insider threat events, and every role in the team contributes to its development.

Key Responsibilities

• Run insider threat investigations and detection operations as a senior hands-on contributor.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Perform statistical analysis of insider events to identify patterns, trends and control gaps.
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
• Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Participate in developing the team s agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI-generated outputs against real investigations, and feed analyst insight back into the models.
• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.

Basic Qualifications

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Practical hands-on experience in the relevant cyber security domain.
• Demonstrated ability to deliver work independently to a high standard.
• Strong attention to detail in analysis and documentation.

Preferred Qualifications

• Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
• Experience with digital forensics tooling and evidence handling.
• Experience handling matters with HR and Legal involvement.
• Statistical analysis and data visualization skill.
• Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Experience applying automation, scripting or AI-assisted tools to security analytics or investigations.
• Typical tools and technologies: DLP, UEBA, EDR, SIEM, forensic imaging and analysis tooling, case management platforms.

Skills

• Digital Investigation
• Insider Threat Mitigation
• Investigative Analysis
• Forensic Data Analysis
• Incident Management
• Security Monitoring
• Security Operations
• Cloud Security
• Cyber Threat Intelligence

#AGTech