Insider Investigations Analyst (Remote)

The Insider Investigations Analyst will participate in confidential insider risk investigations, create and implement insider risk related detections, and perform detailed investigations by reviewing data from multiple sources. They will communicate with end users regarding potential policy violations when appropriate, assist in data recovery efforts through the creation of comprehensive reports, and provide senior leadership with active investigations notifications/updates. The analyst will handle confidential or sensitive information with discretion, assist in regular alert tuning efforts to minimize false positives, and ensure all investigations are properly documented and tracked. They will support the Incident Response lifecycle via triage and investigation of detections and action as appropriate, assist in the development of detection criteria, and identify security controls coverage and efficiency gaps. The role involves providing information security summaries, participating in incident response, managing escalations, driving efficient process development and documentation for the Incident Response lifecycle, and providing after-hours support on an on-demand basis.