Senior Insider Risk Security Engineer

CVS Health; Alabama; Hybrid; USD 83,000 - 222,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision coverage

Paid time off

Retirement options

Job summary

CVS Health is seeking a Senior Security Engineer – Insider Risk to protect people, data, and operations by investigating insider threats and supporting forensics across the enterprise. You will analyze data from SIEM, EDR, DLP, UBA, and email security to develop investigation leads and support risk containment.

Working with Corporate Security, Legal, HR, and business leaders, you will conduct investigations, prepare reports, maintain evidence handling procedures, and participate in on-call

Qualifications

• 5+ years of information security experience.
• 3+ years in digital forensics, IR, or insider risk investigations.
• 1+ years with evidence handling and chain of custody.
• 2+ DoD 8140 certifications with at least one intermediate/Level 2 technical certification (e.g., SSCP, GSEC, CySA+).

Responsibilities

• Investigate insider risk cases and document findings with stakeholders.
• Manage routine investigations and assist senior analysts on complex matters.
• Triaging data from SIEM, EDR, DLP, UBA, and email security.
• Perform digital forensic analysis on Windows, macOS, Android, and iOS devices.
• Prepare clear reports for technical and non-technical audiences.
• Maintain case documentation and chain of custody procedures.
• Collaborate with SOC, Corporate Security, Legal, HR, and business teams.
• Identify trends and contribute to improvements in detection and response capabilities.
• Participate in on-call rotations for urgent investigations.

Skills

Information security

Digital forensics

Incident response

Evidence handling

DoD 8140 certs

Education

Bachelor's degree

Tools

Axiom

VeraKey

ITR RECON

Splunk

Sentinel

Chronicle

Job description

CVS Health is seeking a Senior Security Engineer – Insider Risk to protect people, data, and operations by investigating insider threats and supporting forensics across the enterprise. You will analyze data from SIEM, EDR, DLP, UBA, and email security to develop investigation leads and support risk containment.

Working with Corporate Security, Legal, HR, and business leaders, you will conduct investigations, prepare reports, maintain evidence handling procedures, and participate in on-call