Description
The Lead Analyst, Digital Investigations, Analytics & Insider Threat will deliver the team's work and act as a senior hands-on contributor within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus.
This is a hands-on analytical role that runs current insider threat operations and participates in developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.
Key Responsibilities:
- Run insider threat investigations and detection operations as a senior hands-on contributor.
- Conduct digital investigations into suspected policy violation, data theft and insider activity.
- Perform tactical analysis across multiple information streams to detect insider threat indicators.
- Perform statistical analysis of insider events to identify patterns, trends and control gaps.
- Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
- Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
- Carry out insider threat risk assessments across business units, functions and scenarios.
- Participate in developing the team’s agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI-generated outputs against real investigations, and feed analyst insight back into the models.
- Deliver assigned work to agreed quality and timelines.
- Support colleagues with peer review and knowledge sharing.
Basic Qualifications:
- Degree in a relevant discipline, or related experience.
- Demonstrated experience in digital investigations, insider threat or corporate investigations.
- Working knowledge of investigative analytics and case handling.
- Practical hands-on experience in the relevant cyber security domain.
- Demonstrated ability to deliver work independently to a high standard.
- Strong attention to detail in analysis and documentation.
Preferred Qualifications:
- Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
- Experience with digital forensics tooling and evidence handling.
- Experience handling matters with HR and Legal involvement.
- Statistical analysis and data visualization skill.
- Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
- Experience in pharmaceutical, life sciences or another highly regulated industry.
- Experience applying automation, scripting or AI-assisted tools to security analytics or investigations.