Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

The Insider Threat Lead Investigator is responsible for conducting high-risk, complex insider threat investigations involving cybersecurity, financial misconduct, intellectual property theft, unauthorized access, and data exfiltration. This role focuses on investigating identified threats produced by the Information Security Engineering team or from other internal reporting.

Responsibilities

• Conduct technical investigations, guide OSINT research, perform subject interviews, evidence collection, data deletion, and asset retrieval.
• Ensure adherence to employment law, corporate policies, and regulatory requirements.
• Utilize a functional understanding of information security principles, practices, and frameworks.
• Investigate identified insider threat cases escalated from the Information Security Engineering team, including financial misconduct, engineering production abuse, intellectual property theft & unauthorized data exfiltration, and legal escalations involving executive personnel.
• Conduct structured investigative interviews with subjects and relevant stakeholders to validate findings and gather additional intelligence.
• Manage incident response in coordination with Information Security, HR, Legal, and other relevant parties.
• Perform custom high-severity data deletions and secure asset retrieval in compliance with legal, regulatory, and corporate policies.
• Collaborate with security engineering teams for the forensic collection of digital evidence from endpoints (Windows, macOS, Chrome OS), cloud storage, and mobile devices (iOS, Android).
• Perform log analysis and coordinate/perform event queries across enterprise systems, synthesizing digital behavior to correlate human events and factors.
• Maintain an understanding of technical evidence, forensic artifacts, and the digital environments in which insider threat activities occur.
• Ensure investigations adhere to employment law, corporate policies, data privacy regulations, and commercial legal frameworks.
• Collaborate with Legal, HR, Privacy, and Compliance teams to assess corporate risk, legal exposure, and remediation strategies.
• Provide clear, structured briefings on high-profile cases to executive leadership and cross-functional security teams.
• Lead post-mortem reviews to refine investigative methodologies and implement lessons learned.

Requirements

• 10-12 years of experience in insider threat investigations, security, digital forensics, or related industries.
• Proven experience conducting high-risk, legally sensitive investigations involving corporate executives and critical business functions.
• Strong expertise in Windows, MacOS, and Chrome OS forensic tools.
• Experience in SQL-based forensic data correlation and behavioral anomaly analysis.
• Strong employment legal and commercial legal acumen, with experience handling workplace investigations and regulatory compliance.
• Familiarity in digital forensic tools.
• Advanced knowledge of Windows Event Viewer, MacOS Console, Chrome OS system logs for forensic evidence retrieval.
• Comprehension and skills in investigating cloud environments and Kubernetes.
• Experience with high-severity data deletion and asset retrieval in corporate environments.
• Ability to conduct investigative interviews and communicate findings clearly and effectively to legal, HR, and security teams.

Skills

• Digital forensics
• Cloud security
• Log analysis
• Enterprise forensic tools
• OSINT
• Windows
• macOS
• Chrome OS
• Cloud storage
• Mobile devices
• iOS
• Android
• AWS
• Azure
• GCP
• SQL
• Kubernetes

Location

• San Francisco

Work Type

• Full-time

Experience Level

• 10-12 years

About the Company

• Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe.
• Every day, hosts offer unique stays and experiences that make it possible for guests to connect with communities in a more authentic way.

Equal Opportunity

• Airbnb is committed to working with the broadest talent pool possible.
• We believe diverse ideas foster innovation and engagement, and allow us to attract creatively-led people, and to develop the best products, services and solutions.
• All qualified individuals are encouraged to apply.