Insider Threat Investigator

Navy Federal Credit Union•Vienna, VA

3d•$110,500 - $141,600•Onsite

About The Position

Identify, assess, and investigate insider threat activity across Navy Federal's corporate, digital, and operational environments. Conduct complex investigations involving unauthorized access or disclosure, data misuse, cyber-enabled activity, foreign influence, fraud, and other behaviors that may place Navy Federal's information, personnel, members, systems, or assets at risk. Partner with Information Security, Fraud, Human Resources, Legal, Compliance, Technology, Physical Security, and business units to mitigate risk, strengthen controls, and support enterprise resilience. Ensure compliance with applicable federal and state laws, regulations, and Navy Federal policies and procedures.

Requirements

Bachelor's degree in Criminal Justice, Cybersecurity, Computer Science, Digital Forensics, Intelligence, Security Studies, Business Administration, or a related field, or the equivalent combination of education, training, and experience
Significant experience conducting insider threat, counterintelligence, cyber, digital forensic, fraud, or other complex investigations within a corporate, financial services, law enforcement, military, intelligence, or government environment
Advanced knowledge of investigative methods, structured interviewing, evidence handling, documentation standards, and chain-of-custody requirements
Advanced skill analyzing behavioral, technical, access, financial, and contextual information to identify risk patterns and develop supportable conclusions
Working knowledge of insider threat principles, counterintelligence risks, cybersecurity controls, unauthorized disclosure prevention, foreign influence indicators, and data protection practices
Experience collaborating with Information Security, Human Resources, Legal, Compliance, Fraud, Technology, Physical Security, and operational business units on sensitive investigations
Experience interpreting technical information from insider threat and cybersecurity tools, such as data loss prevention, user and entity behavior analytics, security information and event management, identity and access management, and privileged access monitoring systems
Advanced research, analytical, problem-solving, and decision-making skills, including the ability to make timely, risk-based recommendations in sensitive or high-impact matters
Advanced verbal and written communication skills, including the ability to explain complex investigative and technical findings to senior leadership and nontechnical audiences
Advanced organizational, planning, and time-management skills, with the ability to manage multiple complex investigations and competing priorities
Advanced interpersonal skills, including the ability to build trust, exercise diplomacy and discretion, and influence stakeholders in sensitive situations
Advanced proficiency with case management, word processing, spreadsheet, presentation, and related productivity tools

Nice To Haves

Experience supporting federal counterintelligence, insider threat, cyber, intelligence community, military, or law enforcement programs
Experience supporting counterintelligence investigative or operational authorities as a current, former, or retired credentialed federal agent
Experience conducting digital forensic analysis or working with forensic tools such as EnCase, FTK, X-Ways, or Splunk
Knowledge of relevant frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, Executive Order 13587, applicable Intelligence Community directives, and federal insider threat program requirements
Experience conducting fraud investigations within a financial institution, including transactional analysis, fraud red flags, and loss mitigation

Responsibilities

Investigate insider threat indicators, including unauthorized access or disclosure, suspicious contacts, data misuse, data exfiltration, foreign influence, cyber activity, fraud, and compromise of sensitive information
Develop and execute investigative plans for complex insider threat, counterintelligence, cyber-enabled, and fraud-related matters
Conduct structured interviews, collect and analyze evidence, and maintain complete and accurate investigative documentation
Coordinate with Information Security and digital forensic teams to evaluate technical evidence, security alerts, system activity, and other relevant data
Analyze behavioral, technical, financial, and contextual information to assess the likelihood, severity, and potential impact of insider threat activity
Perform case triage and risk assessments, prioritizing investigations based on threat severity, business impact, member risk, and regulatory exposure
Preserve evidence and maintain appropriate chain-of-custody requirements in accordance with applicable laws, regulations, and corporate procedures
Collaborate with Human Resources, Legal, Compliance, Information Security, Fraud, Physical Security, Technology, and business units to develop response plans, corrective actions, and control enhancements
Leverage insider threat detection and investigative technologies, including data loss prevention, user and entity behavior analytics, security information and event management, identity and access management, and case management tools
Participate in root cause analysis and recommend preventive measures to address identified vulnerabilities, control gaps, and recurring risk conditions
Prepare comprehensive investigative reports, findings, risk assessments, and executive briefings that clearly communicate supporting facts and recommended actions
Identify insider threat trends and emerging risks through case analysis, intelligence reporting, metrics, and monitoring of evolving cyber and counterintelligence threats
Support insider threat governance, policies, procedures, awareness programs, and targeted training for employees, contractors, and business partners
Coordinate with federal agencies, law enforcement, and industry partners to share relevant threat information, deconflict investigative activity, and identify leading practices, as appropriate
Investigate fraud-related activity as needed, applying fraud detection, transactional analysis, and loss prevention practices
Maintain knowledge of applicable federal and state laws, regulations, cybersecurity standards, privacy requirements, and Navy Federal policies and procedures
Perform other duties as assigned