Insider Threat Investigator - Assistant Vice President

Who we are looking for We are looking for an experienced Insider Threat Investigator to identify, assess, and investigate potential insider threats. The role will analyze security telemetry and data from multiple sources, identify risk patterns, conduct root cause analysis, and translate investigative findings into actionable insights for technical teams and senior stakeholders What you will be responsible for As an Insider Threat Investigator you will Conduct comprehensive investigations analysis in support of the insider threat mandate and in support of GCS policy Aggregate, analyze and evaluate available data to assess insider threat risk Complete Root Cause Analysis in support of active investigations Extract and organize data to build metrics, reports, case studies and trend reports Conduct analysis of incidents and present findings to a variety of audiences, including senior decision makers Prepare and produce situational awareness and warning reports related to insider threat What we value These skills will help you succeed in this role Strong understanding of endpoint, network, and system logs Strong understanding of SIEM tools and how to use them to retrieve and analyze data Strong organizational, multi-tasking, and prioritizing skills Exceptional problem solving and analytical skills Exceptional report writing skills Knowledge of Endpoint Detection and Response and Anti Virus tools Knowledge of Data Loss Prevention tools Knowledge and understanding of data organizing or structuring complex data across varied data sources Certification in ITIL concepts and task management tools/systems Virtual leadership experience with ability to effectively drive results, provide feedback/direction, and manage and build relationships with leaders and team members in a geographically dispersed team environment Knowledge and understanding of data loss analysis: identification of security events Knowledge and understanding of data organizing or structuring complex data across varied data sources Strong organizational, multi-tasking, and prioritizing skills Education & Preferred Qualifications 5+ years of experience with insider threat analysis and/or investigations and monitoring demonstrated through work, military, or education 5+ years of experience with cyber threat detection platforms 5+ years of experience using ticket tracking tools for change management, problem and incident management, and availability management, demonstrated through work, military, or education 3+ years of experience with insider threat detection platforms Strong background in intelligence and/or investigations preferred  Additional Requirements ·   This is an individual contributor role with strong cross-functional collaboration expectations. ·   The role will require sound judgment when working with sensitive cybersecurity, risk, operational, and regulated data.