Insider Threat Analyst / Investigator

This position supports the enterprise insider threat program by serving as a senior analyst. The role focuses on insider threat and information security alerting, triage, escalation, and investigation. It involves performing end-to-end investigations of insider-driven and employee-related information security events by leveraging enterprise security monitoring and case management platforms. The role supports continuous monitoring, investigation, and escalation of high-risk activity.

• Triage, analyze, investigate, escalate, and document insider threat and information security alerts generated from enterprise security tooling.
• Act as an escalation point for alerts originating from XSOAR, Data Loss Prevention (DLP), and insider threat monitoring platforms.
• Assess alerts for risk severity, insider intent, data exposure, and regulatory impact to determine appropriate investigative and escalation actions.
• Conduct end-to-end insider threat and information security investigations, including employee-driven data loss and unauthorized access to systems or sensitive data.
• Correlate signals across endpoint, identity, network, email, and collaboration data sources to establish investigative findings.
• Collect, analyze, and preserve evidence while maintaining documentation and chain of custody standards.
• Prepare clear, audit-defensible investigative summaries with findings, conclusions, and recommended actions.