Staff Insider Threat & Digital Forensics Engineer

Cribl; Jefferson City (MO); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator to join a hybrid team focusing on insider threat, digital/hardware forensics, and executive protection. You will lead investigations end-to-end, coordinate with HR/Legal, and mature programs for detection, case workflows, and playbooks.

Ideal candidates have 7+ years of cross-domain experience, hands-on forensic skills with EnCase/FTK/Cellebrite/X-Ways, and CFCE or equivalent credentials.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection
• Demonstrated lead investigator on insider risk cases with high-stakes, sensitive matters
• Working knowledge of employment law, HR investigation standards, and confidentiality requirements
• Hands-on forensic skills with standard tooling (EnCase, FTK, Cellebrite, X-Ways) and hardware-level techniques
• Active or recent certification through IACIS (CFCE) or equivalent digital forensics credentialing body
• Prior experience in executive protection, including travel risk assessment/intelligence gathering
• Excellent judgment and discretion; ability to maintain confidentiality under pressure
• Strong written and verbal communication skills to present findings to legal/executive audiences
• Willingness to travel on short notice, including international travel

Responsibilities

• Lead insider risk investigations from detection through closure, including scoping, evidence collection, interviews, findings, and remediation recommendations
• Partner with HR, Legal, and Employee Relations to ensure defensible, confidential investigations compliant with employment law and privacy requirements
• Build and mature insider risk program components: detection use cases, escalation criteria, case management workflows, cross-functional playbooks
• Brief sensitive findings to senior stakeholders (Legal, HR, executive leadership) with discretion and documentation
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts
• Maintain chain of custody and produce forensically sound, litigation-ready documentation
• Perform hardware-level forensics (disk imaging, teardown/analysis) in addition to digital forensics
• Apply and maintain relevant certifications (IACIS CFCE or equivalent)

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Physical security

Forensic tooling

Travel risk assessment

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to join a hybrid team focusing on insider threat, digital/hardware forensics, and executive protection. You will lead investigations end-to-end, coordinate with HR/Legal, and mature programs for detection, case workflows, and playbooks.

Ideal candidates have 7+ years of cross-domain experience, hands-on forensic skills with EnCase/FTK/Cellebrite/X-Ways, and CFCE or equivalent credentials.