Insider Threat Investigator

We're currently looking to hire an Insider Threat Investigator to join our team embedded with our client in San Francisco. 

This is a full-time remote position with hours of Monday through Friday, 9:00 a.m. to 5:00 p.m. Pacific Time. Candidates located in the Pacific Time Zone are preferred.

JOB DESCRIPTION

The Insider Threat Investigator will be responsible for conducting comprehensive investigations of internal threats to client operations while contributing to and protecting client culture and business interests. This role provides investigations, case management, and other related security services to address internal threats to the client company. You will use hands-on investigation skills, critical thinking in cybersecurity, adaptive puzzle-solving, and strong communication with team members worldwide to prevent, disrupt, and mitigate complex security issues. You will balance your time between 70% investigative functions and 30% project management for remediation of vulnerability gaps.

RESPONSIBILITIES

• Work complex security incidents with multiple stakeholders, including those without experience in the threat and intelligence fields 
• Work with Security Analysts, utilizing law enforcement databases, social media platforms, and the deep/dark web to investigate known and potential threats
• Produce actionable and concise threat analysis products in a timely manner to inform cross-functional groups, executive managers, and enterprise-wide security operations
• Manage Safety and Security team relationships with local law enforcement partners and other investigative, research, and intelligence groups and vendors
• Coordinate and/or participate in data and/or equipment recovery efforts
• Maintain communication with Client management regarding the status and completion of investigative products or operational decisions that affect performance or investigative standards
• Conform with and abide by all regulations, policies, work procedures, and instructions
• Identify, assess, and investigate insider risk incidents and behaviors of concern, providing mitigation recommendations for highly complex problems.
• Develop and coordinate investigative plans using open-source intelligence and technical tools to gather and analyze evidence.
• Lead incident management coordination as an incident commander.
• Conduct sensitive interviews with victims, witnesses, and persons of interest during investigations, both virtually and in person.
• Document investigative results clearly, using case management software to ensure accurate reporting, tracking, and documentation of workplace violence incidents and behaviors of concern throughout the incident lifecycle.
• Participants and partners with stakeholders to identify new opportunities and solutions that will aid in mitigating insider risks.
• Conduct comprehensive after-action reviews to identify and implement best practices and lessons learned.
• Develop and maintain relationships with multidisciplinary teams, including Talent, Employee Relations, Legal, Cybersecurity, and Technology teams, business leaders, and external partners.
• Develop and refine associated policies, procedures, and other documentation that are in accordance with data privacy and legal requirements and expectations.
• Provide program analytics and case management to detect, identify, and assess concerning behaviors, and develop strategies to mitigate identified risks.
• Communicate complex insider risk threat issues in a way that is understandable to cross-functional partners who may have limited experience in the field.
• This position may require up to 10% travel

REQUIRED QUALIFICATIONS

• Bachelor's Degree in criminal justice, cybersecurity, intelligence studies, or a closely related field
• 8+ years of hands-on insider threat investigations experience in cybersecurity, law enforcement, counterintelligence, or private sector industry equivalent. 
• 4+ years experience in the Industry supporting insider risk mitigation and remediation; conducting complex coordination of projects and initiatives to close identified vulnerabilities with organizational leads and owners. 
• Experience interviewing insider risk actors, witnesses, and impacted individuals.
• Strong competency in industry standards for corporate investigations, employment legal considerations, and practices related to information confidentiality and integrity.
• Experience in insider threat incident triage, coordinating cross-functional response, and conducting investigations across digital and human domains.
• Experience interviewing persons of interest and/or potential witnesses.
• Experience supporting a comprehensive threat management program and direct experience conducting investigations, intelligence collection and analysis, and case management.
• Extensive experience utilizing open-source research, criminal background information, and other online investigative techniques.
• Demonstrated ability to independently manage sensitive cases, interpret evidence, and communicate findings to corporate stakeholders.
• Ability to work some non-traditional hours (e.g., nights, weekends, or holidays) and respond to emergent or time-sensitive situations.
• Excellent written and oral communication skills, demonstrable during the interview process.
• Ability to build partnerships and work collaboratively and cross-functionally.
• Must be highly adaptable and flexible.

PREFERRED QUALIFICATIONS

• ASIS Professional Certified Investigator (PCI)
• CERT Insider Threat Program Manager (ITPM) Certificate
• Data analysis
• Planning and policy drafting
• Training and Exercise experience
• Language skills are a plus

COMPENSATION & BENEFITS

• The HSA medical plan covers 100% of the premium for employee-only coverage. The PPO medical plan requires an employee contribution for employee-only coverage. For both plans, Concentric covers a substantial portion of the premium for dependents.
• Concentric also offers an HSA employer contribution
• Medical FSA
• Employer-paid insurance: life, STD, LTD, and AD&D 
• 401 (k), including employer match 
• 11 paid holidays 
• Paid leave (vacation, sick, parental)
• Annual Health & Wellness Benefit
• Pet Insurance
• National discount employee program
• Employee Assistance Program for personal needs
• Credentity Protection - Eclipse Digital Protection by Concentric
• Free access to our Risk Intelligence Dashboard and GEAR App. Providing 24/7 access to trusted risk intelligence and remote support, helping you stay informed, prepared, and protected wherever you operate.
• Dedicated Security and Intelligence Training Programs for Professional Development
• Coaching and Mentoring Opportunities