Remote Staff Threat Protection Engineer: Insider Risk & Forensics

Cribl; Phoenix (AZ); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator who operates at the intersection of insider threat, digital/hardware forensics, and executive protection. This hybrid role is for someone who has led complex investigations and can brief executives in the same week, while planning travel security for principals.

You will be the senior technical and investigative resource on a small, high-trust team, maturing insider risk, forensics, and physical security programs.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigator on insider risk cases involving sensitive or legally exposed matters.
• Hands-on forensic skills with standard tooling and hardware-level techniques.
• Active CFCE or comparable digital forensics credentialing body certification.
• Ability to travel on short notice, including international trips.
• Strong written and verbal communication, able to translate findings for legal/executive audiences.

Responsibilities

• Lead insider risk investigations from detection through closure with scoping, evidence collection, interviews, findings and remediation.
• Conduct forensic acquisition and analysis of laptops, mobile devices, and network artifacts; maintain chain of custody.
• Perform hardware forensics (disk imaging, teardown) and prepare litigation-ready documentation.
• Provide executive protection coverage and travel risk planning for principals and events.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Digital forensics tools

CFCE certification

Confidentiality & privacy

Travel readiness

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator who operates at the intersection of insider threat, digital/hardware forensics, and executive protection. This hybrid role is for someone who has led complex investigations and can brief executives in the same week, while planning travel security for principals.

You will be the senior technical and investigative resource on a small, high-trust team, maturing insider risk, forensics, and physical security programs.