Senior Insider Threat Investigator

CoreWeave•Washington, DC

14d•$165,000 - $242,000•Hybrid

About The Position

As a Senior Insider Threat Investigator and Program Lead, you will manage both individual investigations and the overall insider threat detection and prevention strategy. You’ll act as a bridge between strategic program design and hands-on investigative execution, driving a data-informed, multidisciplinary insider threat capability.

Requirements

8+ years of experience in insider threat operations, counterintelligence, or corporate investigations.
Demonstrated success leading cross-functional investigations with discretion and rigor.
Strong grasp of both technical (SIEM, DLP, endpoint telemetry) and behavioral (psychological indicators, motives, stressors) threat detection principles.
Excellent writing, presentation, and interpersonal skills.
Bachelor’s or Master’s degree in Security Studies, Psychology, Information Security, or related field desired.
Willingness to travel (regional or international) when required to support investigations or collaborate with key stakeholders.
Proven track record leading high-sensitivity or executive-level investigations with discretion.

Nice To Haves

Experience building or managing enterprise Insider Threat Programs or cross-functional risk initiatives.
Experience in private-sector corporate security or critical infrastructure sectors.
Certifications such as CFE, CISM, or insider threat analyst certifications.
Familiarity with global privacy laws and employee data handling standards.

Responsibilities

Conduct complex, confidential investigations into potential insider threats involving data exfiltration, sabotage, fraud, or behavioral anomalies in partnership with Security Engineering (Detection), Security Operations, HR, and Legal teams.
Build analytical and behavioral models to proactively identify high-risk patterns across systems and data.
Serve as the escalation authority for insider incidents requiring law enforcement coordination.
Develop KPIs and dashboards to track trends, root causes, and emerging risk indicators in partnership with Security Operations and HR teams.
Contribute to the continuously evolving Insider Threat Program roadmap, technology stack, and governance.
Co-develop and maintain playbooks, standard operating procedures (SOPs), and governance documentation for insider risk management.
Partner with stakeholders to increase insider threat awareness, reporting mechanisms, and behavioral red flags.
Conduct after-action reviews, root cause analyses, and help drive program improvements based on investigative findings.