Senior Insider Threat & Forensics Investigator

Cribl; Saint Paul (MN); Híbrido; USD 128 000 - 200 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

health

dental

vision

short-term disability

life insurance

paid holidays

paid time off

fertility treatment benefit

401(k)

equity

Resumo da oferta

Cribl is seeking a staff-level investigator to join a hybrid role focused on insider threat, digital/hardware forensics, and executive protection. You will lead investigations end-to-end, from detection to remediation, and brief executives with tact and discretion.

You will analyze laptops, mobile devices, and network artifacts, maintain chain of custody, and present solid, litigation-ready reports. The role requires 7+ years of relevant experience, CFCE certification, and the ability to travel

Qualificações

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigator on insider risk cases involving high-stakes, legally exposed matters.
• Working knowledge of employment law, HR investigation standards, and confidentiality requirements.
• Hands-on forensic skills with standard tooling (EnCase, FTK, Cellebrite, X-Ways) and hardware-level techniques.
• Active CFCE certification or comparable credentialing body.
• Willingness to travel internationally on short notice.
• Strong written and verbal communication to translate findings for non-technical audiences.

Responsabilidades

• Lead insider risk investigations from initial detection through closure: scoping, evidence collection, interviews, findings, remediation recommendations.
• Partner with HR, Legal, and Employee Relations to ensure defensible, confidential investigations compliant with employment law.
• Build and mature insider risk program components: detection use cases, escalation criteria, case management workflows, cross-functional playbooks.
• Brief sensitive findings to senior stakeholders with discretion and documentation.
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts.
• Maintain chain of custody and produce litigation-ready documentation.
• Perform hardware-level forensics (disk imaging, teardown/analysis) in addition to digital forensics.
• Apply and maintain certifications and stay current with industry standards.
• Provide executive protection coverage during travel and events; plan security logistics.
• Coordinate with executive assistants on itineraries and advance planning for protection.
• Support security assessments of offices and events and mitigate vulnerabilities.

Conhecimentos

Investigations

Forensics

Executive protection

Stakeholder communication

Chain of custody

Formação académica

CFCE Certification (IACIS)

Ferramentas

EnCase

FTK

Cellebrite

X-Ways

Descrição da oferta de emprego

Cribl is seeking a staff-level investigator to join a hybrid role focused on insider threat, digital/hardware forensics, and executive protection. You will lead investigations end-to-end, from detection to remediation, and brief executives with tact and discretion.

You will analyze laptops, mobile devices, and network artifacts, maintain chain of custody, and present solid, litigation-ready reports. The role requires 7+ years of relevant experience, CFCE certification, and the ability to travel