Investigations Analyst

Responsibilities

• Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and security
• Uphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of information
• Collect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations
• Triage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concern
• Conduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sources
• Utilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trends
• Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines
• Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders
• Support employee training and briefings for internal and external audiences
• Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations
• Continuously identify and help implement program improvement methods
• Manage and safeguard sensitive information, including case files, employee PII, and intelligence reports

BASIC QUALIFICATIONS

• Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or IT; OR 4+ years professional experience in internal investigations, information security, counterintelligence, or IT in lieu of a degree

PREFERRED SKILLS AND EXPERIENCE

• 1+ year using a SIEM (Splunk, Panther, Exabeam, etc.) and/or conducting digital forensic investigations in government or corporate environment
• Working level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threats
• Proficiency in Microsoft Purview for eDiscovery
• Familiarity with continuous assessment and detection tuning concepts for insider risk.
• Investigation experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholders
• Ability to conduct interviews on short notice according to established internal guidelines.
• Excellent written and oral communication skills, with the ability to produce clear and concise reports
• Highly organized with a strong attention to detail
• Ability to adapt to changing priorities and deadlines
• Can swiftly adapt to new technical environments and workflows on the fly
• Ability to exercise discretion and confidentiality while conducting highly sensitive tasks

ADDITIONAL REQUIREMENTS

• Must be able to work extended hours and weekends as needed to support critical efforts and operations
• Must be willing to travel ad hoc
• Active TS/SCI clearance, or ability to obtain one. With an active clearance, candidates will be subject to pre-employment screening including background check and drug/alcohol test as well as random drug and alcohol testing during employment