Senior Threat & Forensics Engineer (Remote)

Cribl; City of Albany (NY); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Disability insurance

Life insurance

Paid holidays

PTO

Fertility treatment

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator who works at the intersection of insider threat, digital forensics, and executive protection. This hybrid role leads complex insider risk cases end-to-end, briefs executives, and supports travel security planning.

You will be the senior technical and investigative resource on a small, high-trust team, maturing our insider risk, forensics, and physical security programs.

Qualifications

• 7+ years across insider threat, forensics, and protection.
• Lead investigator on high-stakes insider risk matters.
• Knowledge of employment law and privacy requirements.
• Hands-on forensic tooling experience (EnCase/FTK/Cellebrite).
• Active IACIS CFCE or equivalent certification preferred.
• Willingness to travel internationally on short notice.

Responsibilities

• Lead insider risk investigations from detection through closure.
• Collaborate with HR, Legal, and Employee Relations to ensure defensible investigations.
• Develop detection use cases, escalation criteria, and case workflows.
• Brief senior stakeholders with discretion and documentation.
• Conduct forensic acquisition and analysis of devices and artifacts.
• Maintain chain of custody and create litigation-ready reports.
• Plan security for events and executive travel.

Skills

Insider threat

Digital forensics

Executive protection

Evidence collection

Interviews

Forensic tooling

Privacy compliance

Communication

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator who works at the intersection of insider threat, digital forensics, and executive protection. This hybrid role leads complex insider risk cases end-to-end, briefs executives, and supports travel security planning.

You will be the senior technical and investigative resource on a small, high-trust team, maturing our insider risk, forensics, and physical security programs.