Staff Threat Protection Engineer – Remote & Forensics Lead

Cribl; Salem (OR); Remote; USD 128,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental

Vision

Short-term disability

Life insurance

Paid holidays

Paid time off

Fertility treatment benefit

401(k)

Equity

Job summary

Cribl is seeking a staff-level investigator to lead insider threat, digital/hardware forensics, and executive protection. The role combines forensic investigations with security planning for travel and events, requiring seasoned judgment and confidentiality.

You will work on high-stakes cases, brief executives, and contribute to a mature insider risk program while supporting physical security and incident response across the organization.

Qualifications

• 7+ years across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Lead investigator on insider risk cases involving high-stakes or legally exposed matters.
• Understanding of employment law, HR investigation standards, confidentiality standards.

Responsibilities

• Lead insider risk investigations from detection to closure with scoping, evidence collection, and remediation recommendations.
• Partner with HR, Legal, and Employee Relations to ensure defensible, confidential investigations.
• Develop and mature insider risk program components and cross-functional playbooks.
• Brief senior stakeholders with discretion and documented findings.
• Conduct forensic acquisition and analysis of laptops, mobiles, and storage media.
• Maintain chain of custody and provide litigation-ready documentation.
• Perform hardware-level forensics and pursue relevant certifications; travel as needed.
• Provide executive protection coverage and security planning for events and travel.

Skills

Insider threat investigations

Digital forensics

Hardware forensics

Executive protection

Confidentiality & discretion

Executive communication

Travel risk assessment

Education

IACIS CFCE or equivalent

Tools

EnCase

FTK

Cellebrite

X-Ways

Job description

Cribl is seeking a staff-level investigator to lead insider threat, digital/hardware forensics, and executive protection. The role combines forensic investigations with security planning for travel and events, requiring seasoned judgment and confidentiality.

You will work on high-stakes cases, brief executives, and contribute to a mature insider risk program while supporting physical security and incident response across the organization.