Staff Insider Threat & Forensics Engineer - Remote

Cribl; Sacramento (CA); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator to own insider threat investigations, digital/hardware forensics, and physical security. You will lead end-to-end cases, coordinate with HR and Legal, and mature programs with playbooks and workflows.

The role includes travel protection and security planning for executives and events. You will work on a high-trust team, performing forensic imaging, evidence handling, and executive protection with the goal of reducing risk across the organization.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigator on insider risk cases involving sensitive, high-stakes matters.
• Working knowledge of employment law and confidentiality in internal investigations.
• Hands-on forensic skills with EnCase, FTK, Cellebrite, X-Ways and hardware-level techniques.
• Active CFCE certification or comparable credentialing body.

Responsibilities

• Lead insider risk investigations from detection to closure with scoping and remediation.
• Coordinate with HR, Legal, and Employee Relations to maintain defensible investigations.
• Build and mature insider risk programs: use cases, escalation, workflows.
• Brief senior stakeholders with discretion and well-documented findings.
• Conduct forensic acquisition and analysis of laptops, mobiles, and storage devices.
• Maintain chain of custody and litigation-ready documentation.
• Perform hardware-level forensics including disk imaging and teardown.
• Provide executive protection during travel and company events.
• Plan security for conferences and travel risk assessments with planning teams.

Skills

Insider threat

Digital forensics

Hardware forensics

Executive protection

Forensic tools

CFCE certification

Travel risk

Confidentiality

Communication

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to own insider threat investigations, digital/hardware forensics, and physical security. You will lead end-to-end cases, coordinate with HR and Legal, and mature programs with playbooks and workflows.

The role includes travel protection and security planning for executives and events. You will work on a high-trust team, performing forensic imaging, evidence handling, and executive protection with the goal of reducing risk across the organization.