Senior Insider Threat Investigator - Analytics & Mitigation

Allstate; United States; Hybrid; USD 80,000 - 165,000; Full time

Job summary

Allstate is seeking a Senior Insider Threat Investigator to lead analytical investigations and risk assessments related to insider risks. You will work with investigators, leadership, and cross‑functional teams to deliver timely, defensible outcomes and strengthen controls.

You will apply advanced analytic methods to assess user activity, develop timelines, and document evidentiary findings. Remote‑work eligibility is supported with required workspace standards.

Qualifications

• 3+ years of experience in insider threat programs, cybersecurity investigations, digital forensics, or risk analytics.
• Advanced knowledge of insider threat investigation methodologies, behavioral monitoring, and forensic analysis techniques.
• Experience with DFIR, SIEM, and investigative analytics platforms.
• Strong understanding of regulatory and control frameworks (e.g., NIST, ISO 27001, GDPR).
• Ability to apply data‑driven insights to risk mitigation and program improvement.
• Strong written and verbal communication skills, including executive‑level reporting.

Responsibilities

• Develops and expands insider threat investigation knowledge and capability; communicates complex investigative methodologies, findings, and mitigation strategies.
• Performs portions of high‑complexity insider threat investigations by analyzing user activity, logs, and behavioral data.
• Coordinates investigative actions and communications to mitigate risk and ensure defensible outcomes.
• Analyzes risks, trends, and control gaps across areas; documents results and monitors indicators of insider risk.
• Develops and enhances playbooks, workflows, and response procedures; supports detection and containment activities.
• Partners with Cybersecurity, IT, Legal, Compliance, HR, Privacy, and Analytics teams to ensure regulatory compliance.

Skills

Insider threat investigations

Cyber investigations

Data‑driven decision making

Executive reporting

GDPR knowledge

NIST CSF knowledge

SIEM familiarity

Root cause analysis

Regulatory compliance

Tools

DFIR tools

Security tools

Threat assessment

Job description

Allstate is seeking a Senior Insider Threat Investigator to lead analytical investigations and risk assessments related to insider risks. You will work with investigators, leadership, and cross‑functional teams to deliver timely, defensible outcomes and strengthen controls.

You will apply advanced analytic methods to assess user activity, develop timelines, and document evidentiary findings. Remote‑work eligibility is supported with required workspace standards.