• Use monitoring and detection platforms to investigate anomalous activity for potential insider risk • Advise and assist in the onboarding and implementation of custom tooling designed to alert on anomalous behaviors • Create and maintain a use case library to inform detections, and develop corresponding playbooks and escalation procedures • Create standard operating procedures and cross-functional processes to govern investigation and response collaboration between teams • Prepare investigative reports and briefings for leadership • Maintain chain-of-evidence and engage with External Law Enforcement, when required • Lead training or other education and awareness opportunities for the enterprise as required