Counter-Intelligence Data Exfiltration Investigator

• Plan and conduct data exfiltration investigations independently
• Produce investigative outcomes and determinations capable of withstanding judicial or administrative scrutiny
• Investigate noncompliance with customer regulatory requirements, company policies and procedures, and violations of law
• Write detailed professional investigative reports
• Conduct employee and challenging subject interviews
• Securely store relevant case artifacts in the Resolver Case Management System
• Collaborate with CI&I members, GSS colleagues, and cross-functional partners
• Provide feedback to Enterprise Services on tools and processes for identifying potential indicators of concern
• Provide cognizant FSOs with investigative details for adverse information reporting involving cleared employees
• Assist the CI&I Investigations Team with other investigations as needed

• University degree or equivalent experience and minimum 8 years of prior relevant experience, or an advanced degree in a related field and minimum 5 years of experience
• Experience with User Activity Monitoring (UAM), SPLUNK (SIEM), and Endpoint DLP or similar insider-threat tools
• Experience with counterintelligence and/or investigations
• Experience identifying, collecting, and analyzing data and metrics for leadership
• Experience with computer operating systems, computer networking, and computer vulnerabilities
• U.S. citizenship required
• Active and transferable U.S. government-issued security clearance required before start date
• Active and existing DoD Top Secret clearance required on day one
• Certification by a federal credentialing counterintelligence or investigative agency preferred
• Prior law enforcement experience preferred
• Hands‑on experience with CI, SCI, SAP, and/or ITAR/EAR investigations preferred
• Familiarity with DoD Manual 5205.07 Volumes 1–4 preferred
• Familiarity with DoD 5200.01 Volumes 1–3 and the incident reporting process preferred
• Familiarity with 32 CFR Part 117 National Industrial Security Program Operating Manual preferred
• Familiarity with computer forensics methodologies and techniques preferred
• Highest degree of moral and ethical standards

Demonstrates expertise in conducting data exfiltration investigations, producing detailed investigative reports, and collaborating with cross-functional teams. Possesses strong analytical skills for identifying and addressing noncompliance with regulatory requirements and company policies.

• Data Exfiltration Investigations
• User Activity Monitoring (UAM)
• SPLUNK (SIEM)
• Counterintelligence Experience
• Active U.S. Government‑Issued Security Clearance

• Investigative Reporting
• Data Analysis
• Computer Forensics Methodologies
• Computer Networking
• Computer Vulnerabilities

• Collaboration
• Communication
• Ethical Standards

• Federal Credentialing Counterintelligence Certification
• DoD Top Secret Clearance

• DoD Manual 5205.07
• DoD 5200.01
• 32 CFR Part 117
• ITAR
• EAR

• Resolver Case Management System
• Endpoint DLP