Senior Investigator, Cyber Security

This is a fully remote position, open to applicants in Florida.

📋 Description

• Lead and assist investigations related to cyber incidents, insider-risk alerts, data misuse, policy breaches, unauthorized disclosures, suspicious user activities, and other sensitive security issues.

• Triage alerts, assess activities, identify impacted users, systems, data, and business processes, and establish investigation priorities.

• Prepare comprehensive investigation summaries, findings, recommendations, and updates suitable for executive review.

• Evaluate suspicious activities, ascertain root causes, validate impacts, and support containment or remediation efforts.

• Correlate evidence from endpoints, networks, identities, cloud, email, and user behavior.

• Utilize threat intelligence and investigative tools to enhance cases, verify indicators, refine detections, and aid in proactive risk mitigation.

• Identify and evaluate insider-risk indicators across DLP, UEBA, identity, endpoint, cloud, collaboration, and security monitoring platforms.

• Investigate potential data exfiltration, unauthorized access, unusual file movements, misuse of sensitive information, and risky behaviors.

• Monitor high-risk situations such as employee departures, role changes, privileged access, high-risk travel, sensitive projects, and recurrent policy violations.

• Ensure thorough case documentation from initiation to closure.

• Safeguard evidence integrity and maintain the chain of custody where necessary.

• Coordinate escalation, containment, access modifications, monitoring, employee actions, clean-device workflows, post-travel reviews, and other mitigation measures.

• Convert technical findings into clear business risk language for non-technical stakeholders.

⛳️ Requirements

• Proven experience in incident response, security operations, cyber investigations, threat intelligence, insider-risk investigations, or sensitive security issues, particularly regarding APT groups.

• Practical knowledge of SIEM, SOAR, EDR, DLP, case management, identity, endpoint, cloud, and threat intelligence platforms.

• Experience in briefing both technical and non-technical stakeholders, including Cyber Security leadership, Legal, HR, Compliance, and executive audiences.

• Background in operational security, information security, personnel security, physical security, intelligence, compliance, or security program management.

• Excellent skills in written documentation, evidence handling, judgment, discretion, collaboration, and time management.

• Bilingual communication abilities and experience in cleared environments are a plus.

• Willingness to attend an in-person interview at a VERSANT Media location if necessary.

🏝️ Benefits

• Health insurance

• Retirement plans

• Paid time off

• Equal employment opportunities

• Reasonable accommodation support for qualified individuals with disabilities and disabled veterans