Insider Threat Analyst

Title: Insider Threat Analyst
Location: Washington DC/ HYBRID 3 days onsite 2 days remote

About the Role: We are seeking a highly skilled Insider Threat Analyst to support our security
operations by identifying, analyzing, and mitigating risks from potential insider threats. The ideal
candidate will have a strong background in security, intelligence, or investigations and be adept at
developing insider threat programs, monitoring suspicious activity, and gathering threat intelligence
to safeguard our organization’s assets.
Role Description:
• Develop, implement, and manage insider threat programs, including policies, procedures, and
tools.
• Monitor alerts, triage security events, and analyze potential insider threat or risk activities.
• Gather, analyze, and assess threat intelligence from internal and external sources to identify
emerging threats and vulnerabilities.
• Leverage Microsoft Security Tools (e.g., Sentinel) in both Azure and non-Azure environments to
detect and respond to threats.
• Collaborate with security teams, HR, legal, and management to investigate and address insider
threat incidents.
• Maintain comprehensive documentation and reporting for investigations and risk assessments.
‍
Required Qualifications & Education:
• BS/BA Degree in Cybersecurity or Information Technology from a U.S. accredited college,
university, or institution.
• 3+ years of experience working in any of the following fields: insider threat; law enforcement;
intelligence (collection, targeting, or analysis); counterintelligence; corporate security; and
investigations.
• CISSP, GIAC, CEH, Security +, Network +, or equivalent Certification(s).
• Experience developing and implementing an insider threat program, including policies, procedures,
and tools.
• Experience monitoring alerts, triaging events, and performing analysis into potential insider
threat/risk activities.
• Experience gathering and analyzing threat intelligence from internal and external sources to
identify emerging threats and vulnerabilities.
• Experience with Microsoft Security Tools (e.g. Sentinel) that is either part of or independent of the
Microsoft Azure offering.
• Additional experience and critical knowledge preferred with the following tools: Qualys,
Crowdstrike, Cloudflare, CyberArk, Solarwinds
• Has excellent oral, writing, and team skills.
‍
Clearance and Location Requirements:
• Able to be cleared for a Public Trust clearance.