Threat Protection Engineer

Cribl builds telemetry infrastructure for some of the world's biggest security teams. We're remote-first and grounded in a simple idea: software is a people business.

• Lead insider risk investigations from initial detection through closure.
• Partner closely with HR, Legal, and Employee Relations.
• Build and mature insider risk program components.
• Brief sensitive findings to senior stakeholders.
• Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts.
• Maintain chain of custody and produce forensically sound, litigation-ready documentation.
• Perform hardware-level forensics.
• Apply and maintain relevant certifications.
• Provide executive protection coverage for principals during domestic and international travel.
• Lead security planning for company conferences and events.
• Conduct pre-travel intelligence and risk assessments.
• Coordinate directly with executive assistants on itineraries.
• Support physical security assessments of office locations, facilities and events.

• 7+ years of experience across insider threat investigations, digital/hardware forensics, and physical/executive protection.
• Demonstrated experience serving as lead investigator on insider risk cases.
• Working knowledge of employment law, HR investigation standards, and confidentiality requirements.
• Hands-on forensic skills with standard tooling (e.g., EnCase, FTK, Cellebrite, X-Ways) and hardware-level forensic techniques.
• Active or recent certification through IACIS (CFCE) or comparable digital forensics credentialing body.
• Prior experience in executive protection.
• Excellent judgment and discretion.
• Strong written and verbal communication skills.
• Willingness and ability to travel on short notice, including internationally.
• Preferred: Background in law enforcement, military, or federal investigative service.
• Preferred: Experience building or scaling an insider risk program.
• Preferred: Clearance at the TS level preferred, Secret will be reviewed.
• Preferred: Familiarity with UEBA/DLP tooling and insider threat detection platforms.

• Remote - United States.
• Base Salary Range: $128,000 - $200,000 USD.
• In addition to a competitive salary, Cribl also offers a generous benefits package which includes health, dental, vision, short-term disability, and life insurance, paid holidays and paid time off, a fertility treatment benefit, 401(k), and equity.