Senior Insider Threat & Forensics Investigator

Cribl; San Francisco (CA); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl, a leading B2B SAAS data observability firm, is seeking a staff-level investigator to join our insider risk, digital/hardware forensics, and executive protection capabilities. You will lead investigations end-to-end, coordinate with HR and Legal, and brief executives on sensitive findings.

This hybrid/remote-first role demands expert forensic skills, experience imaging devices, and travel readiness to support high-stakes cases and protect Cribl leadership at events and travels worldwide.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Hands-on forensic skills with standard tooling (EnCase, FTK, Cellebrite, X-Ways) and hardware-level techniques.
• Active or recent certification through IACIS CFCE or comparable digital forensics credentialing body.

Responsibilities

• Lead insider risk investigations from initial detection through closure, including scoping, evidence collection, interviews, findings, and remediation recommendations.
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts; produce chain-of-custody and litigation-ready docs.
• Provide executive protection coverage for principals during travel and company events; plan security for conferences and assess travel risks.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Forensic tooling

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl, a leading B2B SAAS data observability firm, is seeking a staff-level investigator to join our insider risk, digital/hardware forensics, and executive protection capabilities. You will lead investigations end-to-end, coordinate with HR and Legal, and brief executives on sensitive findings.

This hybrid/remote-first role demands expert forensic skills, experience imaging devices, and travel readiness to support high-stakes cases and protect Cribl leadership at events and travels worldwide.