# Lead Analyst, Digital Investigations, Analytics & Insider Threat

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst---Digital-Investigations--Analytics---Insider-Threat_450096?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_26906308-9b4

## Description

The Lead Analyst, Digital Investigations, Analytics & Insider Threat will deliver the team's work and act as a senior hands-on contributor within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus.

This is a hands-on analytical role that runs current insider threat operations and participates in developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.

**Key Responsibilities:**

- Run insider threat investigations and detection operations as a senior hands-on contributor.

- Conduct digital investigations into suspected policy violation, data theft and insider activity.

- Perform tactical analysis across multiple information streams to detect insider threat indicators.

- Perform statistical analysis of insider events to identify patterns, trends and control gaps.

- Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.

- Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.

- Carry out insider threat risk assessments across business units, functions and scenarios.

- Participate in developing the team’s agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI-generated outputs against real investigations, and feed analyst insight back into the models.

- Deliver assigned work to agreed quality and timelines.

- Support colleagues with peer review and knowledge sharing.

**Basic Qualifications:**

- Degree in a relevant discipline, or related experience.

- Demonstrated experience in digital investigations, insider threat or corporate investigations.

- Working knowledge of investigative analytics and case handling.

- Practical hands-on experience in the relevant cyber security domain.

- Demonstrated ability to deliver work independently to a high standard.

- Strong attention to detail in analysis and documentation.

**Preferred Qualifications:**

- Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.

- Experience with digital forensics tooling and evidence handling.

- Experience handling matters with HR and Legal involvement.

- Statistical analysis and data visualization skill.

- Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.

- Experience in pharmaceutical, life sciences or another highly regulated industry.

- Experience applying automation, scripting or AI-assisted tools to security analytics or investigations.

## Skills

### Required
- AI for Cybersecurity
- Case Management
- Cloud Security
- Cyber Threat Intelligence
- Digital Investigation
- DLP Projectors
- Forensic Data Analysis
- Incident Management
- Infrastructure Security
- Insider Threat Mitigation
- Intrusion Detection
- Intrusion Prevention
- Investigative Analysis
- ML Security
- Offensive Cyber Operations
- Security Monitoring
- Security Operations
- Security Planning
- Security Protocols
- Security Risk
- Security Technologies

### Nice to have
- Data Loss Prevention
- User and Entity Behavior Analytics
- digital forensics tooling
- statistical analysis
- data visualization
- CERT Insider Threat Program Manager
- GCITP
- GCFA
- GCFE
- CISSP
- CompTIA Security+

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst---Digital-Investigations--Analytics---Insider-Threat_450096?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)