Insider Threat Investigator

Identify, assess, and investigate insider threat activity across Navy Federal's corporate, digital, and operational environments. Conduct complex investigations involving unauthorized access or disclosure, data misuse, cyber-enabled activity, foreign influence, fraud, and other behaviors that may place Navy Federal's information, personnel, members, systems, or assets at risk. Partner with Information Security, Fraud, Human Resources, Legal, Compliance, Technology, Physical Security, and business units to mitigate risk, strengthen controls, and support enterprise resilience. Ensure compliance with applicable federal and state laws, regulations, and Navy Federal policies and procedures

• Investigate insider threat indicators, including unauthorized access or disclosure, suspicious contacts, data misuse, data exfiltration, foreign influence, cyber activity, fraud, and compromise of sensitive information
• Develop and execute investigative plans for complex insider threat, counterintelligence, cyber-enabled, and fraud-related matters
• Conduct structured interviews, collect and analyze evidence, and maintain complete and accurate investigative documentation
• Coordinate with Information Security and digital forensic teams to evaluate technical evidence, security alerts, system activity, and other relevant data
• Analyze behavioral, technical, financial, and contextual information to assess the likelihood, severity, and potential impact of insider threat activity
• Perform case triage and risk assessments, prioritizing investigations based on threat severity, business impact, member risk, and regulatory exposure
• Preserve evidence and maintain appropriate chain-of-custody requirements in accordance with applicable laws, regulations, and corporate procedures
• Collaborate with Human Resources, Legal, Compliance, Information Security, Fraud, Physical Security, Technology, and business units to develop response plans, corrective actions, and control enhancements
• Leverage insider threat detection and investigative technologies, including data loss prevention, user and entity behavior analytics, security information and event management, identity and access management, and case management tools
• Participate in root cause analysis and recommend preventive measures to address identified vulnerabilities, control gaps, and recurring risk conditions
• Prepare comprehensive investigative reports, findings, risk assessments, and executive briefings that clearly communicate supporting facts and recommended actions
• Identify insider threat trends and emerging risks through case analysis, intelligence reporting, metrics, and monitoring of evolving cyber and counterintelligence threats
• Support insider threat governance, policies, procedures, awareness programs, and targeted training for employees, contractors, and business partners
• Coordinate with federal agencies, law enforcement, and industry partners to share relevant threat information, deconflict investigative activity, and identify leading practices, as appropriate
• Investigate fraud-related activity as needed, applying fraud detection, transactional analysis, and loss prevention practices
• Maintain knowledge of applicable federal and state laws, regulations, cybersecurity standards, privacy requirements, and Navy Federal policies and procedures
• Perform other duties as assigned
• Bachelor's degree in Criminal Justice, Cybersecurity, Computer Science, Digital Forensics, Intelligence, Security Studies, Business Administration, or a related field, or the equivalent combination of education, training, and experience
• Significant experience conducting insider threat, counterintelligence, cyber, digital forensic, fraud, or other complex investigations within a corporate, financial services, law enforcement, military, intelligence, or government environment
• Advanced knowledge of investigative methods, structured interviewing, evidence handling, documentation standards, and chain-of-custody requirements
• Advanced skill analyzing behavioral, technical, access, financial, and contextual information to identify risk patterns and develop supportable conclusions
• Working knowledge of insider threat principles, counterintelligence risks, cybersecurity controls, unauthorized disclosure prevention, foreign influence indicators, and data protection practices
• Experience collaborating with Information Security, Human Resources, Legal, Compliance, Fraud, Technology, Physical Security, and operational business units on sensitive investigations
• Experience interpreting technical information from insider threat and cybersecurity tools, such as data loss prevention, user and entity behavior analytics, security information and event management, identity and access management, and privileged access monitoring systems
• Advanced research, analytical, problem-solving, and decision-making skills, including the ability to make timely, risk-based recommendations in sensitive or high-impact matters
• Advanced verbal and written communication skills, including the ability to explain complex investigative and technical findings to senior leadership and nontechnical audiences
• Advanced organizational, planning, and time-management skills, with the ability to manage multiple complex investigations and competing priorities
• Advanced interpersonal skills, including the ability to build trust, exercise diplomacy and discretion, and influence stakeholders in sensitive situations
• Advanced proficiency with case management, word processing, spreadsheet, presentation, and related productivity tools

Desired Qualifications

• Experience supporting federal counterintelligence, insider threat, cyber, intelligence community, military, or law enforcement programs
• Experience supporting counterintelligence investigative or operational authorities as a current, former, or retired credentialed federal agent
• Experience conducting digital forensic analysis or working with forensic tools such as EnCase, FTK, X-Ways, or Splunk
• Knowledge of relevant frameworks and standards, including NIST Cybersecurity Framework, ISO 27001, Executive Order 13587, applicable Intelligence Community directives, and federal insider threat program requirements
• Experience conducting fraud investigations within a financial institution, including transactional analysis, fraud red flags, and loss mitigation

Additional Information

Hours

• Monday - Friday, 8:00AM - 4:30PM

Location

• 820 Follin Lane, Vienna, VA 22180