Senior Insider Threat & Forensics Engineer - Remote

Cribl; Denver (CO); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

health

dental

vision

short-term disability

life insurance

paid holidays

paid time off

fertility treatment benefit

401(k)

equity

Job summary

Cribl is seeking a staff-level investigator to join a hybrid team focused on insider threat, digital/hardware forensics, and executive protection. You will lead complex insider risk investigations end-to-end, perform forensic exams, and brief executives on findings, while maturing our security programs.

As the senior technical and investigative resource on a small, high-trust team, you’ll help grow insider risk, forensics, and physical security programs and travel as needed.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigations on high-stakes matters with discretion and confidentiality.
• Hands-on forensic tooling across devices and media.
• Knowledge of employment law and HR investigation standards.

Responsibilities

• Lead insider risk investigations from detection through closure, including scoping, evidence collection, interviews, findings and remediation.
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts.
• Provide executive protection coverage and security planning for travel and events.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Forensic tooling

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to join a hybrid team focused on insider threat, digital/hardware forensics, and executive protection. You will lead complex insider risk investigations end-to-end, perform forensic exams, and brief executives on findings, while maturing our security programs.

As the senior technical and investigative resource on a small, high-trust team, you’ll help grow insider risk, forensics, and physical security programs and travel as needed.