Staff Insider Threat & Forensics Engineer

Cribl; Helena (MT); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator to join our security team, blending insider threat investigations, digital/hardware forensics, and physical/executive protection. You’ll lead complex cases end-to-end, brief executives, and shape programs across detection, case management, and playbooks.

Ideal candidates have 7+ years of experience across the domains, hands-on tooling skills (EnCase/FTK/Cellebrite/X-Ways), and active CFCE or equivalent certification.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection
• Lead investigator on insider risk cases involving sensitive, high-stakes or legally exposed matters
• Hands-on forensic skills with standard tooling and hardware-level methods
• Active or recent IACIS CFCE or comparable certification preferred

Responsibilities

• Lead insider risk investigations from detection to closure, including scoping, evidence collection, interviews, findings and remediation recommendations
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts
• Maintain chain of custody and produce forensically sound, litigation-ready documentation
• Perform hardware-level forensics (disk imaging, teardown/analysis, embedded storage) as needed
• Provide executive protection coverage for principals during travel and at events
• Plan security for conferences and events, conduct pre-travel risk assessments
• Coordinate with executive assistants on itineraries and advance planning to ensure seamless protection

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Evidence handling

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to join our security team, blending insider threat investigations, digital/hardware forensics, and physical/executive protection. You’ll lead complex cases end-to-end, brief executives, and shape programs across detection, case management, and playbooks.

Ideal candidates have 7+ years of experience across the domains, hands-on tooling skills (EnCase/FTK/Cellebrite/X-Ways), and active CFCE or equivalent certification.