Remote Insider Threat Investigator & Incident Commander

Concentric; San Francisco (CA); Remote; USD 135,000 - 165,000; Full time

Job summary

Concentric is seeking an Insider Threat Investigator to join our team embedded with a client in San Francisco. This full-time remote role runs Mon–Fri, 9:00 am–5:00 pm PT, with candidates in the PTZone preferred.

You will conduct comprehensive investigations into internal threats, provide case management, and coordinate with global teams to prevent and mitigate risks. The role emphasizes OSINT-driven analysis, interviewing affected individuals, and leading incident management as needed, with

Qualifications

• Bachelor’s degree in criminal justice, cybersecurity, intelligence studies or related field.
• 8+ years of hands-on insider threat investigations in cybersecurity, law enforcement or private sector.
• 4+ years coordinating insider risk mitigation and closing vulnerabilities with stakeholders.
• Experience interviewing insider risk actors and witnesses.
• Experience with investigations, intelligence collection and case management.

Responsibilities

• Lead complex insider risk investigations with multiple stakeholders.
• Coordinate with Security Analysts using open-source data and online platforms.
• Produce concise threat analyses for executives and security operations.
• Manage relationships with law enforcement partners and other groups.
• Develop investigative plans using OSINT and technical tools.
• Document results clearly in case management systems and reports.
• Travel up to 10% as needed.

Education

Bachelor's Degree in criminal justice, cybersecurity, intelligence studies, or a closely related field

Tools

Open-source research tools

Case management software

Social media platforms

Law enforcement databases

Job description

Concentric is seeking an Insider Threat Investigator to join our team embedded with a client in San Francisco. This full-time remote role runs Mon–Fri, 9:00 am–5:00 pm PT, with candidates in the PTZone preferred.

You will conduct comprehensive investigations into internal threats, provide case management, and coordinate with global teams to prevent and mitigate risks. The role emphasizes OSINT-driven analysis, interviewing affected individuals, and leading incident management as needed, with