Insider Threat Investigator

About the team + role

Robinhood's Insider Trust team is dedicated to protecting the company and its customers from internal risks. We operate at the critical intersection of security, people, and risk, collaborating closely with various departments including Legal, People Relations, Physical Security, Detection & Response, and business leaders to address complex and sensitive situations. This is a hands-on investigative and analytical role perfect for someone who thrives in ambiguity, excels at connecting disparate signals, and is driven to uncover the truth behind risky behavior. You will support and execute investigations, with opportunities to own more complex cases over time. We foster a 'bias for action' culture, moving quickly to assess and mitigate risk while ensuring the business can continue to operate effectively and safely.

This role involves occasional travel for high-priority investigations and on-site security assessments. The position is based in our Menlo Park, CA office, with a requirement of at least 3 days per week in-person attendance. We believe in the power of in-person collaboration to accelerate progress, spark innovation, and strengthen our community.

What You’ll Do

• Support and execute insider threat investigations, including those involving data exfiltration and policy violations, partnering with senior investigators.
• Analyze behavioral and technical signals by correlating data from endpoints, cloud systems, and user activity (DLP, UEBA, SIEM) to identify risk patterns and anomalies.
• Transform alerts into actionable insights by developing context, identifying intent, and surfacing findings that drive decisions.
• Contribute to risk reduction efforts by identifying control gaps, improving detection methods, and enhancing investigative processes.
• Support nation-state risk mitigation efforts by assisting in the identification and evaluation of potential insider risks tied to external influence, such as coercion or data targeting.
• Partner cross-functionally with Legal, People Relations, Physical Security, and Detection & Response to ensure investigations are aligned, defensible, and effective.
• Produce clear, concise, and actionable reports with evidence-based recommendations.
• Help build scalable processes, including playbooks, workflows, and automation, to improve investigative efficiency and repeatability.
• Operate with speed and pragmatism in high-pressure situations, mitigating risk without hindering business operations.

What You Bring

• 5+ years of experience in insider threat, investigations, or related security roles.
• Experience supporting or conducting investigations related to user behavior, data misuse, or policy violations.
• Strong understanding of insider threat patterns, risk indicators, data exfiltration methods, and investigative techniques.
• Experience working with tools such as DLP, UAM, UEBA, and SIEM, as well as endpoint and/or cloud telemetry.
• Ability to analyze large datasets and identify meaningful patterns.
• Strong critical thinking skills and the ability to connect technical signals to human behavior.
• Solid written communication skills for clearly explaining findings.
• Comfort working in fast-paced, ambiguous environments.

Why this role matters

Insider risk is a challenging, high-impact security problem, often hidden within normal behavior. This role is crucial for protecting customer data, company intellectual property, financial integrity, and overall trust in the Robinhood platform. You will be instrumental in identifying risks early, supporting critical investigations, and helping Robinhood stay ahead of internal threats and externally influenced insider risks.

What We Offer

• Challenging, high-impact work for career growth.
• Performance-driven compensation including multipliers for impact, bonus programs, equity, and 401(k) matching.
• Comprehensive benefits: 100% paid employee health insurance with 90% dependent coverage, a flexible lifestyle wallet for wellness and learning, employer-paid life & disability insurance, fertility benefits, and mental health support.
• Generous time off: company holidays, paid time off, sick time, and parental leave.
• Exceptional office experience with catered meals, events, and comfortable workspaces.

Base pay range for this role in Zone 1 (Menlo Park, CA; New York, NY; Bellevue, WA; Washington, DC) is $140,000—$165,000 USD. Other zones and compensation details will be discussed during the interview process. This role is eligible for bonus opportunities, equity, and benefits.

Key skills/competency

• Insider Threat Investigations
• Data Exfiltration
• User Behavior Analytics (UEBA)
• Security Information and Event Management (SIEM)
• Digital Forensics
• Risk Management
• Policy Violations
• Cross-functional Collaboration
• Reporting and Documentation
• Security Operations