Senior Insider Threat Investigator

Molina Healthcare•Long Beach, CA

16h

About The Position

Provides senior-level support for complex analysis and investigations to identify, assess, and mitigate insider risks affecting Molina Healthcare’s employees, members, operations, systems, data, and reputation. The role integrates technical and behavioral information, advises leaders and cross-functional partners, and advances monitoring, investigative, reporting, and risk-reduction capabilities to strengthen the Insider Threat Program. The investigator leads complex insider threat inquiries from initiation through closure, conducts proactive threat hunting, analyzes information from enterprise security and business sources, and presents findings and mitigation strategies. The role also improves investigative methods and program capabilities, supports policies and awareness initiatives, and partners with stakeholders across the organization while ensuring investigations comply with applicable policies, privacy requirements, legal obligations, and ethical standards.

Requirements

At least 5 years of experience in insider threat, counterintelligence, digital forensics, intelligence analysis, corporate investigations, cyber threat intelligence, or a related field, or an equivalent combination of relevant education and experience.
Experience leading investigations involving technical and behavioral indicators and preparing executive-level reports and briefings.
Experience analyzing information from data loss prevention, user and entity behavior analytics, security information and event management, endpoint detection and response, insider risk management, user activity monitoring, email security, or comparable security platforms.
Advanced knowledge of insider threat methods, investigative techniques, risk management principles, cybersecurity concepts, data protection controls, security operations, and privacy and compliance considerations related to employee monitoring.
Strong analytical, critical-thinking, problem-solving, written, verbal, presentation, collaboration, and stakeholder-management skills.
Ability to analyze large volumes of information, develop actionable conclusions, communicate with technical and non-technical audiences, and handle sensitive and confidential information with discretion.

Nice To Haves

Global Counter-Insider Threat Professional, Certified Insider Threat Analyst, Certified Insider Threat Program Manager, or comparable credentials.
Experience applying artificial intelligence, automation, and data analytics to improve investigative efficiency.
Experience with insider risk management, threat analytics, case management, or equivalent platforms.
Experience in healthcare, another regulated industry, intelligence, military, law enforcement, or corporate investigations.

Responsibilities

Lead identification, triage, analysis, and investigation of insider threat indicators and anomalous activity to enable timely, defensible risk decisions.
Analyze and correlate technical and non-technical information from user activity monitoring, user and entity behavior analytics, data loss prevention, insider risk management, security information and event management, endpoint telemetry, Human Resources information, and other enterprise sources.
Conduct proactive threat hunting and develop hypotheses, timelines, link analyses, behavior profiles, and threat assessments to identify emerging risks.
Lead complex insider threat inquiries and investigations through closure, including interviews, evidence gathering, case documentation, risk assessments, executive summaries, and recommendations.
Present findings and mitigation strategies to leaders and program stakeholders, ensuring investigations follow applicable policies, privacy requirements, legal obligations, and ethical standards.
Develop and enhance detection use cases, investigative methodologies, operating procedures, dashboards, metrics, and performance reporting.
Identify monitoring, detection, reporting, and investigative gaps and support implementation and optimization of analytical technologies, automation, and other program capabilities.
Contribute to policies, standards, procedures, awareness materials, audits, assessments, tabletop exercises, and maturity initiatives.
Partner with Human Resources, Legal, Compliance, Privacy, Information Security, Corporate Security, Internal Audit, and business leadership on investigations and risk mitigation.
Communicate complex insider risk issues to technical and non-technical audiences and provide subject matter guidance, training, and awareness.