Lead Analyst - Digital Investigations, Analytics & Insider Threat

Overview

Lead Analyst within GSK's Digital Investigations, Analytics and Insider Threat team, acting as a senior hands-on contributor with insider threat operations as the priority focus, and participating in developing the team's agentic AI framework.

What you'll do

• Run insider threat investigations and detection operations as a senior hands-on contributor.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Perform statistical analysis of insider events to identify patterns, trends and control gaps.
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
• Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Participate in developing the team's agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI-generated outputs against real investigations, and feed analyst insight back into the models.
• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.

What you'll need

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Practical hands-on experience in the relevant cyber security domain.
• Demonstrated ability to deliver work independently to a high standard.
• Strong attention to detail in analysis and documentation.

Nice to have

• Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
• Experience with digital forensics tooling and evidence handling.
• Experience handling matters with HR and Legal involvement.
• Statistical analysis and data visualization skill.
• Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Experience applying automation, scripting or AI-assisted tools to security analytics or investigations.

Details

• Typical tools and technologies: DLP, UEBA, EDR, SIEM, forensic imaging and analysis tooling, case management platforms.