CounterIntelligence Data Exfiltration Investigator

Identify and investigate potential insider threats related to data exfiltration. Use User Activity Monitoring (UAM), Splunk (SIEM), and Endpoint DLP to triage cyber behaviors, distinguish real threats from false positives, and conduct thorough employee interviews. Independently plan investigations, produce highly professional investigative reports, securely manage case artifacts in Resolver, and collaborate with CI&I and cross-functional partners to refine detection tools and processes.