Cribl
Staff Threat Protection Engineer
Remote - United States · Staff+
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- We're one of the fastest‑growing private companies and a leading player in a massive, fast‑moving market.
- With a global workforce, we're remote‑first and grounded in a simple idea: software is a people business.
- Cribl is the place where curious, collaborative people can do their best work, grow fast, and bring their full selves to the herd.
Responsibilities
- Diversity drives innovation, enables better decisions to support our customers, and inspires change for the better.
- We're building a culture where differences are valued and welcomed, and we work together to bring out the best in each other.
- Lead insider risk investigations from initial detection through closure, including scoping, evidence collection, interviews, findings, and remediation recommendations
- Partner closely with HR, Legal, and Employee Relations to ensure investigations are conducted defensibly, confidentially, and in compliance with employment law and privacy requirements
- Conduct forensic acquisition and analysis of laptops, mobile devices, removable media, and network artifacts in support of investigations
- Maintain chain of custody and produce forensically sound, litigation-ready documentation
- Perform hardware-level forensics (disk imaging, device teardown/analysis, embedded storage) in addition to standard digital forensics
- Apply and maintain relevant certifications (IACIS CFCE or equivalent; EnCE, GCFE, or similar strongly preferred)
- Lead security planning for company conferences and events
- Demonstrated experience serving as lead investigator on insider risk cases involving sensitive, high-stakes, or legally exposed matters
Compensation
- $128,000 - $200,000 USD
Benefits
- Provide executive protection coverage for principals during domestic and international travel and at company events and conferences.
Company info
- Why You'll Love This Role We're looking for a staff-level investigator who operates at the intersection of insider threat, digital/hardware forensics, and executive protection.
This listing is sourced directly from Cribl's careers page and normalized into a canonical job model.