Staff Security Investigation Analyst

5+ years of experience in corporate investigations, forensics, or incident response. Hands-on experience with insider threat and DLP tooling (e.g., UEBA, E-discovery, SIEM, EDR, Code42, Dtex, Microsoft Purview, or similar). Proficiency investigating in cloud-native environments (AWS, GCP, Azure) and SaaS platforms; comfortable with audit logs, IAM, and identity-based investigations. Knowledge of employment law, privacy regulations (GDPR, CCPA), and compliance standards. Experience conducting investigative interviews in sensitive employment contexts. Strong communication skills and ability to handle sensitive cases with discretion across all levels of the organization, including executives. Proficiency in case management and e-discovery tools.

Conduct investigations into insider threats, data exfiltration, IP theft, compliance violations, and policy breaches. Investigate incidents involving sensitive assets: source code, AI/ML models, training data, client intelligence, and research IP. Gather and analyze digital and physical evidence using established forensic methodologies. Conduct investigative interviews with subjects, witnesses, and stakeholders. Prepare detailed reports and documentation of investigative findings. Collaborate with HR, Legal, and Compliance teams. Maintain case management systems and ensure confidentiality and chain of custody integrity. Develop and enhance investigation protocols, evidence handling standards, and response workflows. Identify patterns, trends, or emerging risks and recommend preventive controls, detection improvements, and policy changes. Provide executive-level reporting on investigation trends, program metrics, and risk posture.