Staff Threat Protection Engineer — Insider Risk & Forensics

Cribl; Boise (ID); Hybrid; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

Paid holidays

Paid time off

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator who operates at the intersection of insider threat, digital and hardware forensics, and executive protection. This hybrid role requires leading complex insider risk cases end-to-end, briefing executives, and planning protective travel for principals.

You will be the senior technical and investigative resource on a small, high-trust team, maturing insider risk, forensics, and physical security programs while collaborating with HR, Legal, and Employee

Qualifications

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection (or equivalent depth).
• Lead investigator on insider risk cases involving high-stakes or legally exposed matters.
• Hands-on forensic skills with standard tooling and hardware-level techniques.

Responsibilities

• Lead insider risk investigations from detection through closure with scoping, evidence collection, interviews, findings, and remediation recommendations.
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts; maintain chain of custody.
• Provide executive protection for principals during domestic/international travel and events; plan security for conferences and travel risk assessments.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Interviews

Documentation

Stakeholder briefing

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator who operates at the intersection of insider threat, digital and hardware forensics, and executive protection. This hybrid role requires leading complex insider risk cases end-to-end, briefing executives, and planning protective travel for principals.

You will be the senior technical and investigative resource on a small, high-trust team, maturing insider risk, forensics, and physical security programs while collaborating with HR, Legal, and Employee