Requirements
- Over five years of experience in corporate investigations, forensics, or incident response.
- Practical experience with insider threat and data loss prevention tools, such as UEBA, E-discovery, SIEM, EDR, Code42, Dtex, Microsoft Purview, or similar.
- Expertise in investigating cloud-native environments (AWS, GCP, Azure) and SaaS platforms, with a focus on audit logs, IAM, and identity-based investigations.
- Understanding of employment law, privacy regulations (GDPR, CCPA), and compliance standards.
- Experience conducting investigative interviews in sensitive employment contexts.
- Excellent communication skills and the ability to handle sensitive cases with discretion across all organizational levels, including executives.
- Proficiency in case management and e-discovery tools.
Nice to Have
- Certifications such as CFE, CFCE, or GIAC-related credentials.
- Experience in AI, technology, financial services, or market intelligence industries.
- Background in intelligence analysis, law enforcement, or government insider threat programs.
- Familiarity with threat intelligence and OSINT methodologies.
Benefits
- Equity
- Generous benefits program
Compensation
Performance-based bonus
Work Arrangement
Remote, with potential for office visits and travel.
Team
Small but growing team responsible for identifying, investigating, and mitigating risks posed by trusted insiders. The team collaborates closely with HR, Legal, IT, Security Engineering, and business leadership.
Team
The Insider Protection Team is responsible for identifying, investigating, and mitigating risks posed by trusted insiders - whether through malicious intent, negligence, or compromise. The team is a core part of the security organization, and partners closely with HR, Legal, IT, Security Engineering, and business leadership. This is a small but growing team, with the expectation to make a direct impact on the security posture. The role will come with the opportunity to shape how the Insider Protection team scales their capabilities globally.
Other
- This role requires both domestic and international travel. Will you be able to travel domestically and internationally?
- This is a remote role, but you may be required to come into the office for security incidents or project needs. Will you be able to travel or commute to our offices when required for these situations?
Not mentioned
