Sr. Technical Investigator, Digital Forensics

Tesla’s Security Intelligence team is responsible for protecting the company’s intellectual property, products, services, and infrastructure from complex insider threats and internal risks. We are a team of security professionals passionate about staying ahead of threats and ensuring the security and integrity of Tesla’s systems and data. We leverage cutting-edge technology, including AI and automation, to scale our investigative capabilities.

We are seeking a detail-oriented and technically proficient technical investigator to join our Security Intelligence team. This role is critical in identifying, analyzing, and responding to potential insider threats and data loss incidents. You will lead digital forensic investigations across endpoints, cloud environments, and network systems, leveraging advanced tools and methodologies to uncover malicious or negligent behavior, assess risk, and support remediation efforts and prevention strategies.

This position requires a strong foundation in digital forensics, incident response, and data protection principles, combined with the ability to translate technical findings into actionable intelligence for legal, compliance, and executive stakeholders. You will also help scale the team’s impact by building AI-powered workflows that automate evidence collection, timeline reconstruction, and anomaly detection. This is a high-impact role at the intersection of digital forensics and enterprise security, where precision, speed, and integrity define success.

• Lead end-to-end forensic investigations across endpoints, cloud platforms, and network infrastructure-identifying IoCs, data exfiltration, and unauthorized access
• Investigate insider threat indicators: anomalous behavior, excessive data access, credential misuse, and suspicious transfers
• Analyze logs from EDR/XDR, SIEMs, DLP systems, identity providers, and email gateways to reconstruct attack timelines and user activity
• Conduct forensically sound data acquisition from laptops, mobile devices, servers, and cloud repositories-ensuring chain of custody and integrity
• Deep-dive into system artifacts: file systems, memory dumps, registry, logs, and configuration states to reconstruct events
• Correlate endpoint, network, and identity telemetry to build a full picture of user behavior and system access
• Develop and deploy AI-enhanced workflows to automate evidence gathering, pattern recognition, and timeline generation-scaling investigative throughput
• Collaborate with HR and Legal to conduct structured, compliant interviews-using digital evidence to guide questions, validate statements, and remediate security incidents
• Translate complex technical findings into clear, chronological, and executive-ready summaries for cross-functional stakeholders
• Drive continuous improvement by refining DLP policies, access controls, and detection rules based on investigation outcomes

• Bachelor’s degree in Cybersecurity, or related or equivalent experience
• 5+ years of experience in digital forensics, incident response, or security investigations, with a proven track record in insider threat or data loss cases
• Proficiency with forensic tools: FTK, X-Ways, Cellebrite, Axiom, or equivalent
• Strong grasp of network protocols (TCP/IP, HTTP/S, DNS) and log analysis via SIEM platforms
• Ability to conduct professional, lawful, and compliant interviews in a security or HR context, supported by digital evidence
• Exceptional analytical and communication skills: able to explain complex technical concepts clearly to non-technical teams
• Scripting skills in Python, PowerShell, or Bash for automation and data processing
• In-depth knowledge of Windows, macOS, and Linux/Unix systems
• Proven experience integrating AI tools to accelerate or enhance investigative workflows
• Hands-on experience with Microsoft Purview for O365 data collection and analysis

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Medical plans > plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D
• Short-term and long-term disability insurance (90 day waiting period)
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program