Senior Insider Threat & Forensics Engineer

Cribl; Olympia (WA); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Disability

Life Insurance

Holidays

PTO

Fertility benefits

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator blending insider threat, digital/hardware forensics, and executive protection. This hybrid role sits on a high-trust team, handling investigations end-to-end and protecting principals during travel and events.

You will lead investigations from detection to remediation, work with HR/Legal, develop playbooks, perform forensic imaging and device analysis, and brief senior leaders. Willingness to travel is preferred.

Qualifications

• 7+ years in insider threat investigations, digital/hardware forensics, or protective services.
• Led investigations on high-stakes insider risk cases and sensitive matters.
• Knowledge of employment law and privacy in investigations; maintain confidentiality.
• Hands-on forensic skills with standard tooling and hardware-level techniques.
• Active or recent CFCE certification preferred.

Responsibilities

• Lead insider risk investigations from detection through closure.
• Collaborate with HR, Legal, and Employee Relations for defensible investigations.
• Develop insider risk program components: use cases, escalation criteria, workflows.
• Brief sensitive findings to Legal, HR, and executive leadership with discretion.
• Perform forensic acquisitions and analyses of laptops, mobile devices, and network artifacts.
• Maintain chain of custody and produce litigation-ready documentation.
• Provide executive protection coverage and travel risk planning.
• Plan security for conferences and events; assess office locations for vulnerabilities.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Forensic tooling

IACIS CFCE

Privacy & confidentiality

Travel risk assessment

Strong communication

Tools

EnCase

FTK

Cellebrite

X-Ways

CFCE (IACIS)

Job description

Cribl is seeking a staff-level investigator blending insider threat, digital/hardware forensics, and executive protection. This hybrid role sits on a high-trust team, handling investigations end-to-end and protecting principals during travel and events.

You will lead investigations from detection to remediation, work with HR/Legal, develop playbooks, perform forensic imaging and device analysis, and brief senior leaders. Willingness to travel is preferred.