Senior Insider Threat & Forensics Investigator

Cribl; Madison (WI); Hybrid; USD 128.000 - 200.000; Vollzeit

Benefits dieser Stelle

Health

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Zusammenfassung

Cribl is seeking a staff-level investigator to lead insider threat investigations, digital/hardware forensics, and physical/executive protection. This hybrid role demands handling complex cases end-to-end, briefing executives, and coordinating travel security with discretion and accuracy.

The ideal candidate has 7+ years in insider threat, forensics, or related fields, with hands-on tooling (EnCase, FTK, Cellebrite, X-Ways) and active CFCE/CFCE-like certification. Travel is required.

Qualifikationen

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and executive protection.

Aufgaben

• Lead insider risk investigations from detection to closure with scoping, evidence collection, interviews, findings and remediation recommendations.
• Conduct forensic acquisition and analysis of laptops, mobile devices, and network artifacts; maintain chain of custody and litigation-ready docs.
• Provide executive protection coverage for principals during travel and events; plan security for conferences and advance logistics.

Kenntnisse

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Legal compliance

Ausbildung

IACIS CFCE certification

Tools

EnCase

FTK

Cellebrite

X-Ways

Jobbeschreibung

Cribl is seeking a staff-level investigator to lead insider threat investigations, digital/hardware forensics, and physical/executive protection. This hybrid role demands handling complex cases end-to-end, briefing executives, and coordinating travel security with discretion and accuracy.

The ideal candidate has 7+ years in insider threat, forensics, or related fields, with hands-on tooling (EnCase, FTK, Cellebrite, X-Ways) and active CFCE/CFCE-like certification. Travel is required.