Counter-Intelligence Data Exfiltration Investigator

RTX

Counterintelligence investigator protecting RTX aerospace and defense systems from insider data exfiltration. Conducting investigations, interviews, reporting, and threat analysis using UAM, Splunk, and Endpoint DLP.

Posted 8/13/2026full-timeMcKinney • Texas • 🇺🇸 United StatesSeniorLead💰 $107,500 - $204,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in conducting data exfiltration investigations, producing detailed investigative reports, and collaborating with cross-functional teams. Possesses strong analytical skills for identifying and addressing noncompliance with regulatory requirements and company policies.

Highest-signal resume keywords

Data Exfiltration InvestigationsUser Activity Monitoring (UAM)SPLUNK (SIEM)Counterintelligence ExperienceActive U.S. Government-Issued Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Investigative ReportingData AnalysisComputer Forensics MethodologiesComputer NetworkingComputer Vulnerabilities

Soft Skills

CollaborationCommunicationEthical Standards

Tools & Technologies

Resolver Case Management SystemEndpoint DLP

Certifications & Qualifications

Federal Credentialing Counterintelligence CertificationDoD Top Secret Clearance

Industry Keywords

DoD Manual 5205.07DoD 5200.0132 CFR Part 117ITAREAR

Tech Stack

Tools & technologies

Splunk

About the role

Key responsibilities & impact

Plan and conduct data exfiltration investigations independently
Produce investigative outcomes and determinations capable of withstanding judicial or administrative scrutiny
Investigate noncompliance with customer regulatory requirements, company policies and procedures, and violations of law
Write detailed professional investigative reports
Conduct employee and challenging subject interviews
Securely store relevant case artifacts in the Resolver Case Management System
Collaborate with CI&I members, GSS colleagues, and cross-functional partners
Provide feedback to Enterprise Services on tools and processes for identifying potential indicators of concern
Provide cognizant FSOs with investigative details for adverse information reporting involving cleared employees
Assist the CI&I Investigations Team with other investigations as needed

Requirements

What you’ll need

University degree or equivalent experience and minimum 8 years of prior relevant experience, or an advanced degree in a related field and minimum 5 years of experience
Experience with User Activity Monitoring (UAM), SPLUNK (SIEM), and Endpoint DLP or similar insider-threat tools
Experience with counterintelligence and/or investigations
Experience identifying, collecting, and analyzing data and metrics for leadership
Experience with computer operating systems, computer networking, and computer vulnerabilities
U.S. citizenship required
Active and transferable U.S. government-issued security clearance required before start date
Active and existing DoD Top Secret clearance required on day one
Certification by a federal credentialing counterintelligence or investigative agency preferred
Prior law enforcement experience preferred
Hands-on experience with CI, SCI, SAP, and/or ITAR/EAR investigations preferred
Familiarity with DoD Manual 5205.07 Volumes 1–4 preferred
Familiarity with DoD 5200.01 Volumes 1–3 and the incident reporting process preferred
Familiarity with 32 CFR Part 117 National Industrial Security Program Operating Manual preferred
Familiarity with computer forensics methodologies and techniques preferred
Highest degree of moral and ethical standards

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Short-term disability
Long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays
Annual short-term and/or long-term incentive compensation programs may be available
No relocation assistance