Engineer - Digital Investigations, Analytics & Insider Threat

Overview

Engineer supporting GSK's insider threat program and digital investigations, with a focus on current insider threat operations and contributing to an agentic AI framework for prevention, detection and response.

What you'll do

• Support day-to-day insider threat monitoring, triage and case support under the direction of senior colleagues.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Help build and tune detection logic across DLP and UEBA platforms.
• Help maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Contribute to the development of the team's agentic AI framework: help test and validate AI-driven detection and triage models, label and curate data sets, and document workflows and playbooks for automation.
• Deliver assigned tasks under the direction of senior colleagues.
• Build technical depth in the capability through structured development.

What you'll need

• Degree in a relevant discipline, or related experience, or relevant certification.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Foundational understanding of cyber security concepts and the relevant domain.
• Willingness to learn and develop technical depth.
• Clear written and verbal communication.

Nice to have

• Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
• Experience with digital forensics tooling and evidence handling.
• Experience handling matters with HR and Legal involvement.
• Statistical analysis and data visualization skill.
• Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Interest in or exposure to AI/ML-assisted security tooling or automation, such as scripting or agentic workflows.

Details

• Location: Bengaluru Luxor North Tower.