All vacancies
Staff Threat Protection Engineer
Cribl
Remote · United States$10,667–16,667 gross/mofull-timeCribl Careers
Why You’ll Love This Role We're looking for a staff-level investigator who operates at the intersection of insider threat, digital/hardware forensics, and executive protection. This is a hybrid role for someone who has led complex insider risk cases end-to-end, can walk into a forensic exam and brief executives in the same week, and is equally comfortable planning a principal's travel security as they are imaging a hard drive for a legal hold.
Responsibilities
- Lead insider risk investigations from initial detection through closure, including scoping, evidence collection, interviews, findings, and remediation recommendations
- Partner closely with HR, Legal, and Employee Relations to ensure investigations are conducted defensibly, confidentially, and in compliance with employment law and privacy requirements
- Build and mature insider risk program components: detection use cases, escalation criteria, case management workflows, and cross-functional playbooks
- Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts in support of investigations
- Maintain chain of custody and produce forensically sound, litigation-ready documentation
- Lead security planning for company conferences and events
- Conduct pre-travel intelligence and risk assessments (geopolitical, environmental, venue-specific) to inform protective planning
- Support physical security assessments of office locations, facilities and events, identifying and mitigating potential vulnerabilities and additional ways to secure them
Languages
- Work format
- Remote
- Seniority
- Senior
- Posted
- 7 Oct 2026
- Last verified
- In the last 5 days
Similar roles
- Developer MarketerLottieFiles · Remote · worldwide, UTC+4 accepted
- Senior Backend Engineer - Core Engine / Decision Intelligence (m/w/d)Taledo GmbH · Remote · worldwide, UTC+4 accepted
- Mechatronics Engineer (Mechanics and Electronics)SoftConstruct · Armenia · On-site
- Solutions Architect for AutomotiveCanonical · Remote · worldwide
- Full Stack Software Developer (Remote locations)Halborn · Remote · worldwide, UTC+4 accepted
- Senior ServiceNow ConsultantEPAM Systems · Remote · Armenia
