Staff Security Investigation Analyst

Investigation:

• Conduct investigations into insider threats, data exfiltration, policy breaches, and compliance violations.
• Analyze digital and physical evidence using forensic methodologies, including cloud audit logs, SaaS telemetry, endpoint data, and identity/access records.
• Perform investigative interviews with subjects, witnesses, and stakeholders in sensitive employment contexts.

Responsibilities:

• Prepare detailed investigative reports suitable for executive leadership, legal proceedings, and regulatory inquiries.
• Develop and refine investigative protocols, evidence handling standards, and response workflows.
• Maintain case management systems, ensuring integrity, confidentiality, and proper chain-of-custody documentation.

Requirements:

• 5+ years of experience in corporate investigations, digital forensics, or incident response.
• Hands-on experience with insider threat and DLP tooling (e.g., UEBA, SIEM, EDR, Code42, Dtex, Microsoft Purview).
• Proficiency investigating cloud-native environments (AWS, GCP, Azure) and SaaS platforms; comfortable with audit logs, IAM, and identity-based investigations.