Description
The Engineer, Digital Investigations, Analytics & Insider Threat will support delivery of the team's work and build depth within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus.
This is a hands-on engineering role that supports current insider threat operations and contributes to developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.
Key Responsibilities:
- Support day-to-day insider threat monitoring, triage and case support under the direction of senior colleagues.
- Conduct digital investigations into suspected policy violation, data theft and insider activity.
- Perform tactical analysis across multiple information streams to detect insider threat indicators.
- Help build and tune detection logic across DLP and UEBA platforms.
- Help maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
- Carry out insider threat risk assessments across business units, functions and scenarios.
- Contribute to the development of the team’s agentic AI framework: help test and validate AI-driven detection and triage models, label and curate data sets, and document workflows and playbooks for automation.
- Deliver assigned tasks under the direction of senior colleagues.
- Build technical depth in the capability through structured development.
Basic Qualifications:
- Degree in a relevant discipline, or related experience, or relevant certification.
- Demonstrated experience in digital investigations, insider threat or corporate investigations.
- Working knowledge of investigative analytics and case handling.
- Foundational understanding of cyber security concepts and the relevant domain.
- Willingness to learn and develop technical depth.
- Clear written and verbal communication.
Preferred Qualifications:
- Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
- Experience with digital forensics tooling and evidence handling.
- Experience handling matters with HR and Legal involvement.
- Statistical analysis and data visualization skill.
- Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
- Experience in pharmaceutical, life sciences or another highly regulated industry.
- Interest in or exposure to AI/ML-assisted security tooling or automation, such as scripting or agentic workflows.