Remote Senior Insider Threat Investigator

Allstate Northern Ireland Limited; USA; Remote; USD 80.000 - 165.000; Vollzeit

Zusammenfassung

Allstate is seeking a Senior Insider Threat Investigator to lead analytics-driven investigations and risk assessments across designated areas. You will handle complex cases, develop timelines, and document evidentiary findings for investigative and legal teams.

The role requires senior-level expertise in behavioral monitoring, DFIR, and regulatory compliance, with collaboration across Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics.

Qualifikationen

• 3+ years in insider threat programs, cybersecurity investigations, digital forensics, or risk analytics.
• Advanced knowledge of insider threat investigation methodologies, behavioral monitoring, and forensic analysis techniques.
• Experience with DFIR, SIEM, and investigative analytics platforms.
• Strong understanding of regulatory and control frameworks (e.g., NIST, ISO 27001, GDPR).
• Ability to apply data-driven insights to risk mitigation and program improvement.

Aufgaben

• Develops and expands insider threat investigation knowledge and capability; communicates complex investigative methodologies, findings, and mitigation strategies to investigators, partners, and less-experienced team members.
• Performs portions of high-complexity insider threat investigations by analyzing user activity, access patterns, logs, behavioral data, and investigative artifacts to develop timelines, risk assessments, root-cause analyses, and evidentiary documentation.
• Coordinates required investigative actions and communications in alignment with insider threat response plans and guidance from leadership to mitigate risk, protect sensitive information, and ensure timely, defensible outcomes.
• Supports research and analysis of potential and known insider threat risks, trends, and control gaps across assigned areas; evaluates effectiveness of investigative and monitoring controls and documents results.
• Develops and enhances portions of investigative playbooks, workflows, and response procedures; monitors indicators of insider risk and supports detection, escalation, and containment activities.

Kenntnisse

Cyber Investigations

Data-Driven Decisions

Digital Forensics

Executive Reporting

GDPR

Insider Threat Mitigation

IT Security Operations

NIST CSF

SIEM

Threat Assessment

Root Cause Analysis

Tools

DFIR Tools

SIEM

Jobbeschreibung

Allstate is seeking a Senior Insider Threat Investigator to lead analytics-driven investigations and risk assessments across designated areas. You will handle complex cases, develop timelines, and document evidentiary findings for investigative and legal teams.

The role requires senior-level expertise in behavioral monitoring, DFIR, and regulatory compliance, with collaboration across Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics.