Lead end-to-end insider threat investigations, triage alerts from SIEM/UBA/DLP/endpoint sources, collect evidence and interview employees, produce decision-ready briefs and risk assessments, refine detection and alerting logic, drive scaled mitigation and automation, and partner with Legal, HR, and business teams while mentoring junior analysts.

Implement and scale enterprise DLP controls across multiple OS and decentralized datasets, automate DLP operations using LLMs and agentic AI, deploy prevention solutions, partner cross-functionally on remediation and compliance, monitor metrics and program effectiveness, and support long-term data protection strategy against evolving risks and regulations.

Triage alerts and investigate insider threats using SIEM, UBA, DLP, and endpoint tools. Conduct end-to-end investigations, collect evidence, interview employees, coordinate with Legal/HR/security, produce concise investigative reports, and recommend mitigations. Improve detection by refining alert logic and addressing recurring control gaps.