Insider Threat Investigator

Remote•Remote

Remote150000–150000remotefirstjobs

cybersecuritymiddleremote-first-jobsbenefits

About this role

Are you interested in joining an organization with a global reach? In a world of shifting threats, Concentric is your trusted ally. Powered by elite professionals from military, government, and intelligence backgrounds. If you are passionate about intelligence, risk analysis, threat management, executive protection, security operations, or business resiliency, Concentric may be the organization you’ve been searching for! Concentric is a risk consultancy specializing in delivering strategic security and intelligence services. We provide holistic, intelligent security solutions for private clients and corporations globally. Concentric offers strategic advisory services, risk assessments, physical protection, threat intelligence, open-source monitoring, program audits, secure embedded staffing, and training for security teams and intelligence analysts. Our ultimate goal is to be recognized as the most innovative, capable, and trusted Risk Management partner in the world, and we do this by following these core values: Integrity – Collaboration

Relationships – Excellence – Creativity
Results Join Us, Concentric - “Your World Secured” We’re currently looking to hire an Insider Threat Investigator to join our team embedded with our client in San Francisco. This is a full-time remote position with hours of Monday through Friday, 9:00 a.m. to 5:00 p.m. Pacific Time. Candidates located in the Pacific Time Zone are preferred. JOB DESCRIPTION The Insider Threat Investigator will be responsible for conducting comprehensive investigations of internal threats to client operations while contributing to and protecting client culture and business interests. This role provides investigations, case management, and other related security services to address internal threats to the client company. You will use hands-on investigation skills, critical thinking in cybersecurity, adaptive puzzle-solving, and strong communication with team members worldwide to prevent, disrupt, and mitigate complex security issues. You will balance your time between 70% investigative functions and 30% project management for remediation of vulnerability gaps. RESPONSIBILITIES Work complex security incidents with multiple stakeholders, including those without experience in the threat and intelligence fields Work with Security Analysts, utilizing law enforcement databases, social media platforms, and the deep/dark web to investigate known and potential threats Produce actionable and concise threat analysis products in a timely manner to inform cross-functional groups, executive managers, and enterprise-wide security operations Manage Safety and Security team relationships with local law enforcement partners and other investigative, research, and intelligence groups and vendors Coordinate and/or participate in data and/or equipment recovery efforts Maintain communication with Client management regarding the status and completion of investigative products or operational decisions that affect performance or investigative standards Conform with and abide by all regulations, policies, work procedures, and instructions Identify, assess, and investigate insider risk incidents and behaviors of concern, providing mitigation recommendations for highly complex problems. Develop and coordinate investigative plans using open-source intelligence and technical tools to gather and analyze evidence. Lead incident management coordination as an incident commander. Conduct sensitive interviews with victims, witnesses, and persons of interest during investigations, both virtually and in person. Document investigative results clearly, using case management software to ensure accurate reporting, tracking, and documentation of workplace violence incidents and behaviors of concern throughout the incident lifecycle. Participants and partners with stakeholders to identify new opportunities and solutions that will aid in mitigating insider risks. Conduct comprehensive after-action reviews to identify and implement best practices and lessons learned. Develop and maintain relationships with multidisciplinary teams, including Talent, Employee Relations, Legal, Cybersecurity, and Technology teams, business leaders, and external partners. Develop and refine associated policies, procedures, and other documentation that are in accordance with data privacy and legal requirements and expectations. Provide program analytics and case management to detect, identify, and assess concerning behaviors, and develop strategies to mitigate identified risks. Communicate complex insider risk threat issues in a way that is understandable to cross-functional partners who may have limited experience in the field. This position may require up to 10% travel REQUIRED QUALIFICATIONS Bachelor’s Degree in criminal justice, cybersecurity, intelligence studies, or a closely related field 8+ years of hands-on insider threat investigations experience in cybersecurity, law enforcement, counterintelligence, or private sector industry equivalent. 4+ years experience in the Industry supporting insider risk mitigation and remediation; conducting complex coordination of projects and initiatives to close identified vulnerabilities with organizational leads and owners. Experience interviewing insider risk actors, witnesses, and impacted individuals. Strong competency in industry standards for corporate investigations, employment legal considerations, and practices related to information confidentiality and integrity. Experience in insider threat incident triage, coordinating cross-functional response, and conducting investigations across digital and human domains. Experience interviewing persons of interest and/or potential witnesses. Experience supporting a comprehensive threat management program and direct experience conducting investigations, intelligence collection and analysis, and case management. Extensive experience utilizing open-source research, criminal background information, and other online investigative techniques. Demonstrated ability to independently manage sensitive cases, interpret evidence, and communicate findings to corporate stakeholders. Ability to work some non-traditional hours (e.g., nights, weekends, or holidays) and respond to emergent or time-sensitive situations. Excellent written and oral communication skills, demonstrable during the interview process. Ability to build partnerships and work collaboratively and cross-functionally. Must be highly adaptable and flexible. PREFERRED QUALIFICATIONS ASIS Professional Certified Investigator (PCI) CERT Insider Threat Program Manager (ITPM) Certificate Data analysis Planning and policy drafting Training and Exercise experience Language skills are a plus COMPENSATION & BENEFITS The HSA medical plan covers 100% of the premium for employee-only coverage. The PPO medical plan requires an employee contribution for employee-only coverage. For both plans, Concentric covers a substantial portion of the premium for dependents. Concentric also offers an HSA employer contribution Medical FSA Employer-paid insurance: life, STD, LTD, and AD&D 401 (k), including employer match 11 paid holidays Paid leave (vacation, sick, parental) Annual Health & Wellness Benefit Pet Insurance National discount employee program Employee Assistance Program for personal needs Credentity Protection

Posting details

Remote

Yes

Employment type

—

Workplace type

Remote

Source

remotefirstjobs

First seen

10/10/2026, 8:10:25 PM

Last seen

10/10/2026, 8:10:25 PM