Staff Insider Threat & Forensics Engineer (Remote)

Cribl; Springfield (IL); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator to join a hybrid team focused on insider threat, digital/hardware forensics, and executive protection. You will serve as the senior technical and investigative resource, leading complex cases end-to-end and briefing executives on sensitive findings.

You will collaborate with HR, Legal, and Employee Relations, build program components, and perform forensic analysis on devices while ensuring compliance and confidentiality.

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigator on insider risk cases involving sensitive, high-stakes matters.
• Knowledge of employment law, HR investigation standards, and confidentiality.
• Hands-on forensic skills with standard tooling and hardware-level techniques.
• Active or recent CFCE or comparable digital forensics credentialing body.
• Experience in executive protection including travel risk intel gathering.
• Strong judgement, discretion, and ability to handle confidential information.
• Excellent written and verbal communication for technical and legal audiences.

Responsibilities

• Lead insider risk investigations from detection to remediation, including scoping and interviews.
• Support HR, Legal, and Employee Relations to ensure defensible investigations.
• Develop and mature insider risk program components like use cases and playbooks.
• Brief senior stakeholders with discretion and documented findings.
• Conduct forensic acquisition and analysis of laptops, mobiles, and network artifacts.
• Maintain chain of custody and produce litigation-ready reports.
• Perform hardware-forensics such as disk imaging and teardown work.
• Travel internationally and coordinate with executive support staff for protection.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Travel risk assessment

Interviews

Evidence handling

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to join a hybrid team focused on insider threat, digital/hardware forensics, and executive protection. You will serve as the senior technical and investigative resource, leading complex cases end-to-end and briefing executives on sensitive findings.

You will collaborate with HR, Legal, and Employee Relations, build program components, and perform forensic analysis on devices while ensuring compliance and confidentiality.