Senior Insider Threat Investigator - Remote

Molina Healthcare•Long Beach, CA

1d•Remote

About The Position

Provides senior-level support for complex analysis and investigations to identify, assess, and mitigate insider risks affecting Molina Healthcare’s employees, members, operations, systems, data, and reputation. The role integrates technical and behavioral information, advises leaders and cross-functional partners, and advances monitoring, investigative, reporting, and risk-reduction capabilities to strengthen the Insider Threat Program.

Requirements

At least 5 years of experience in insider threat, counterintelligence, digital forensics, intelligence analysis, corporate investigations, cyber threat intelligence, or a related field, or an equivalent combination of relevant education and experience.
Experience leading investigations involving technical and behavioral indicators and preparing executive-level reports and briefings.
Experience analyzing information from data loss prevention, user and entity behavior analytics, security information and event management, endpoint detection and response, insider risk management, user activity monitoring, email security, or comparable security platforms.
Advanced knowledge of insider threat methods, investigative techniques, risk management principles, cybersecurity concepts, data protection controls, security operations, and privacy and compliance considerations related to employee monitoring.
Strong analytical, critical-thinking, problem-solving, written, verbal, presentation, collaboration, and stakeholder-management skills.
Ability to analyze large volumes of information, develop actionable conclusions, communicate with technical and non-technical audiences, and handle sensitive and confidential information with discretion.

Nice To Haves

Global Counter-Insider Threat Professional, Certified Insider Threat Analyst, Certified Insider Threat Program Manager, or comparable credentials.
Experience applying artificial intelligence, automation, and data analytics to improve investigative efficiency.
Experience with insider risk management, threat analytics, case management, or equivalent platforms.
Experience in healthcare, another regulated industry, intelligence, military, law enforcement, or corporate investigations.

Responsibilities

Lead the identification, triage, analysis, and investigation of insider threat indicators and anomalous activity to support timely, defensible risk decisions.
Analyze and correlate complex technical and non-technical information from user activity monitoring, user and entity behavior analytics, data loss prevention, insider risk management, security information and event management, endpoint telemetry, Human Resources information, and other enterprise sources.
Conduct proactive threat hunting and develop hypotheses, timelines, link analyses, behavior profiles, and threat assessments to identify emerging risks before incidents occur.
Lead complex insider threat inquiries and investigations from initiation through closure, including interviews, evidence gathering, case documentation, risk assessments, executive summaries, and recommendations.
Present findings and mitigation strategies to leaders and program stakeholders, ensuring investigations follow applicable policies, privacy requirements, legal obligations, and ethical standards.
Develop and enhance detection use cases, investigative methodologies, operating procedures, dashboards, metrics, and performance reporting to improve program effectiveness.
Identify monitoring, detection, reporting, and investigative gaps, and support implementation and optimization of analytical technologies, automation, and other program capabilities.
Contribute to policies, standards, procedures, awareness materials, audits, assessments, tabletop exercises, and maturity initiatives that strengthen insider risk management.
Partner with Human Resources, Legal, Compliance, Privacy, Information Security, Corporate Security, Internal Audit, and business leadership on cross-functional investigations and risk mitigation.
Communicate complex insider risk issues to technical and non-technical audiences, and provide subject matter guidance, training, and awareness to promote reporting and reduce risk.