Senior Insider Threat & Forensics Investigator

Cribl; Concord (NH); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator at the intersection of insider threat, digital/hardware forensics, and executive protection. This hybrid role places you as the senior technical resource on a small, high-trust team with responsibilities spanning investigations, forensics, and security programs.

You will lead insider risk cases, perform hardware- and software-forensics, and collaborate with HR, Legal, and executives while maturing the security program and travel protection efforts.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection (or equivalent).
• Lead investigator on insider risk cases with high-stakes or legally sensitive matters.
• Hands-on forensic skills with standard tooling and hardware-level techniques.
• Active or recent CFCE/CFCE-equivalent certification preferred.

Responsibilities

• Lead insider risk investigations from detection to closure with scoping, evidence collection, and remediation recommendations.
• Conduct forensic acquisition and analysis of laptops, mobile devices, and network artifacts with admissible documentation.
• Provide executive protection coverage for principals during travel and events, and plan security for conferences.
• Develop and mature insider risk, forensics, and physical security playbooks and workflows.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Forensic tooling

Education

Bachelor's degree in a relevant field

Tools

EnCase

FTK

Cellebrite

X-Ways

UEBA/DLP tooling

Job description

Cribl is seeking a staff-level investigator at the intersection of insider threat, digital/hardware forensics, and executive protection. This hybrid role places you as the senior technical resource on a small, high-trust team with responsibilities spanning investigations, forensics, and security programs.

You will lead insider risk cases, perform hardware- and software-forensics, and collaborate with HR, Legal, and executives while maturing the security program and travel protection efforts.