Insider Threat Investigator

Starlink; Hawthorne (CA); On-site; USD 85,000 - 135,000; Full time

Job summary

SpaceX is seeking an Insider Threat Program Analyst to research, analyze and disseminate information protecting personnel, assets and IP. You will triage data, perform investigations, and build metrics using SIEM/UEBA tools while coordinating with Security, HR, Legal and external partners.

The role requires strong communication, discretion, and the ability to adapt to fast-paced environments; a TS/SCI clearance is preferred or eligible for clearance.

Qualifications

• 1+ year using a SIEM and/or conducting digital forensic investigations.
• Understanding of insider threat program missions and stakeholders.
• Experience with data pipelines or automation is a plus.
• Ability to conduct confidential investigations with discretion.
• Excellent written and verbal communication skills.

Responsibilities

• Conduct investigations and analyses to protect intellectual property and security.
• Triage anomalous event data and analyze insider threat risks to infrastructure.
• Collect, organize, and analyze program data to build metrics and case studies.
• Utilize data tools (DLP/SIEM/UEBA) to identify anomalous activity.
• Communicate findings to team members and management in a timely manner.
• Support training and briefings for internal and external audiences.
• Liaise with external partners to benchmark insider threat programs.
• Identify and implement program improvements.
• Manage sensitive information and case files securely.

Skills

SIEM

Digital Forensics

Insider Threat Concepts

Risk-based Alerting

Interviewing & Reporting

Written & Oral Communication

Attention to Detail

Adaptability

Discretion in Investigations

Education

Bachelor's degree or equivalent

Tools

Microsoft Purview

Job description

SpaceX is seeking an Insider Threat Program Analyst to research, analyze and disseminate information protecting personnel, assets and IP. You will triage data, perform investigations, and build metrics using SIEM/UEBA tools while coordinating with Security, HR, Legal and external partners.

The role requires strong communication, discretion, and the ability to adapt to fast-paced environments; a TS/SCI clearance is preferred or eligible for clearance.