# Engineer, Digital Investigations, Analytics & Insider Threat

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Engineer---Digital-Investigations--Analytics---Insider-Threat_450104?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_5446d7a0-be3

## Description

The Engineer, Digital Investigations, Analytics & Insider Threat will support delivery of the team's work and build depth within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus.

This is a hands-on engineering role that supports current insider threat operations and contributes to developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.

**Key Responsibilities:**

- Support day-to-day insider threat monitoring, triage and case support under the direction of senior colleagues.

- Conduct digital investigations into suspected policy violation, data theft and insider activity.

- Perform tactical analysis across multiple information streams to detect insider threat indicators.

- Help build and tune detection logic across DLP and UEBA platforms.

- Help maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.

- Carry out insider threat risk assessments across business units, functions and scenarios.

- Contribute to the development of the team’s agentic AI framework: help test and validate AI-driven detection and triage models, label and curate data sets, and document workflows and playbooks for automation.

- Deliver assigned tasks under the direction of senior colleagues.

- Build technical depth in the capability through structured development.

**Basic Qualifications:**

- Degree in a relevant discipline, or related experience, or relevant certification.

- Demonstrated experience in digital investigations, insider threat or corporate investigations.

- Working knowledge of investigative analytics and case handling.

- Foundational understanding of cyber security concepts and the relevant domain.

- Willingness to learn and develop technical depth.

- Clear written and verbal communication.

**Preferred Qualifications:**

- Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.

- Experience with digital forensics tooling and evidence handling.

- Experience handling matters with HR and Legal involvement.

- Statistical analysis and data visualization skill.

- Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.

- Experience in pharmaceutical, life sciences or another highly regulated industry.

- Interest in or exposure to AI/ML-assisted security tooling or automation, such as scripting or agentic workflows.

## Skills

### Required
- AI for Cybersecurity
- Alert Logic Threat Manager
- Case Management
- Cloud Security
- Cyber Threat Intelligence
- Digital Investigation
- Forensic Data Analysis
- Incident Management
- Infrastructure Security
- Insider Threat Mitigation
- Intrusion Detection
- Intrusion Prevention
- Investigative Analysis
- ML Security
- Offensive Cyber Operations
- Security Monitoring
- Security Operations
- Security Planning
- Security Protocols
- Security Risk
- Security Technologies

### Nice to have
- Data Loss Prevention
- User and Entity Behavior Analytics
- digital forensics tooling
- evidence handling
- statistical analysis
- data visualization
- CERT Insider Threat Program Manager
- GCITP
- GCFA
- GCFE
- CISSP
- CompTIA Security+

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Engineer---Digital-Investigations--Analytics---Insider-Threat_450104?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)