Senior Insider Threat Investigator & Analytics Lead

Allstate; Oregon; Hybride; USD 80 000 - 165 000; Plein temps

Avantages offerts par ce poste

Home office reimbursement

Equipment provided

Work from home options

Résumé du poste

Allstate is seeking a Senior Insider Threat Investigator to develop and execute parts of the enterprise insider threat program. You will support complex investigations, analytics-driven risk assessments, and mitigation activities related to insider risks, including data loss, fraud, and policy violations.

You will partner with Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics teams to ensure regulatory compliance and provide clear, actionable findings to leadership.

Qualifications

• 3+ years in insider threat, cybersecurity investigations, digital forensics, or risk analytics.
• Advanced knowledge of insider threat methodologies, behavioral monitoring, and forensic analysis.
• Experience with DFIR, SIEM, and investigative analytics platforms.
• Strong understanding of regulatory/control frameworks (NIST, ISO 27001, GDPR).
• Ability to apply data-driven insights to risk mitigation and program improvement.
• Strong written and verbal communication, including executive-level reporting.

Responsabilités

• Develops and expands insider threat investigation knowledge and capability; communicates complex investigative methodologies, findings, and mitigation strategies.
• Performs portions of high-complexity insider threat investigations by analyzing user activity, logs, and data to develop timelines and evidentiary documentation.
• Coordinates investigative actions and communications to mitigate risk and ensure defensible outcomes.
• Supports research and analysis of insider threat risks, trends, and control gaps across areas; evaluates effectiveness of controls.
• Develops and enhances investigative playbooks, workflows, and response procedures; monitors indicators of insider risk.
• Partners with Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics to ensure regulatory compliance.
• Translates findings into recommendations for process, service, and technical improvements.

Connaissances

Insider threat experience

DFIR & SIEM

Regulatory frameworks

Executive reporting

Outils

SIEM platforms

Investigative analytics

Description du poste

Allstate is seeking a Senior Insider Threat Investigator to develop and execute parts of the enterprise insider threat program. You will support complex investigations, analytics-driven risk assessments, and mitigation activities related to insider risks, including data loss, fraud, and policy violations.

You will partner with Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics teams to ensure regulatory compliance and provide clear, actionable findings to leadership.