Counter-Insider Threat Program Analyst

Booz Allen Hamilton; Colorado Springs (CO); On-site; USD 78,000 - 176,000; Full time

Job summary

Booz Allen Hamilton in Colorado Springs seeks a Counter‑Insider Threat Analyst to help protect national security equities. You’ll triage indicators, correlate activity to government thresholds, and deliver rapid, well‑reasoned briefings to senior decision‑makers.

You’ll work across networks, shaping training, policy, and case management for a command‑wide program. If you thrive in fast-paced environments and communicate crisply under time pressure, this role lets you make a direct impact on

Qualifications

• 4+ years of research/analysis in DoD/IC missions such as CI, security or cyber operations.
• Experience with DITMAC thresholds, PRIs, DSoS, NITTF guidance, DoDI 5205.16, National Insider Threat Policy, SORN-driven records management.
• Ability to produce time-critical briefings.
• TS/SCI clearance and eligibility.

Responsibilities

• Conduct daily triage of insider threat information and data detection.
• Capture meeting minutes and track tasks for C-InTP Hub stakeholders.
• Develop and deliver C-InTP training, awareness materials, and briefing products.
• Deliver training at SCI indoctrinations and during National Insider Threat Awareness Month.
• Monitor and report on command-mandated training in C-InT.
• Draft, review, and maintain C-InTP policies, SOPs, and governing docs.
• Conduct semi-annual policy/SOP reviews and update for national changes.
• Assist in revising and securing approval for the C-InTP Annual Report.
• Document stakeholder actions and decisions.
• Manage inquiries and maintain cases in case management systems.
• Track cases end-to-end with comprehensive chronological analysis.

Skills

4+ years of DoD/IC analysis

Thresholds & PRI experience

Time-critical briefing ability

TS/SCI clearance

Education

HS diploma or GED

Job description

Join a culture of empowerment and connectivity.

Develop your craft

Learn the skills you need to accelerate your career.

Discover benefits that support your life and work.

Innovate with intention

Build mission-ready tech that protects the nation.

Are you energized by being a part of a security team? Do you want to use your analytic tradecraft to protect critical national security equities? As a Counter‑Insider Threat Analyst supporting US Space Command’s Counter‑Insider Threat Program (C‑InTP), you’ll be on the first line of defense mitigating insider threats. You’ll triage and analyze indicators from multiple internal and external sources, correlate activity to govt reporting thresholds, and deliver rapid, well‑reasoned briefings that inform senior decision‑makers.

You’ll work across networks, using specific job‑related tools and help shape training, policy, and case management for a command‑wide program. If you thrive in fast‑paced environments, communicate crisply under time pressure, and bring disciplined judgment to sensitive matters, this role lets you make a direct impact on mission success.

Join us. The world can't wait.

What You’ll Work On:

• Conduct daily triage of insider threat information and data detection, including intake, analysis, coordination, and rapid reporting on risk trigger events and indicators relative to government thresholds.
• Capture meeting minutes and track tasks for C‑InTP Hub stakeholders.
• Research, develop, maintain, and deliver consistent C‑InTP training, awareness materials, and briefing products.
• Deliver training at SCI indoctrinations, during National Insider Threat Awareness Month.
• Monitor and retrieve metrics for command‑mandated annual C‑InT computer‑based training.
• Draft, review, staff, and maintain C‑InTP policies, SOPs, and governing documents.
• Conduct semi‑annual policy and SOP reviews and recommend updates to reflect national‑level changes and enterprise best practices.
• Assist the PM annually with revising, publishing, and securing approval for the C‑InTP Annual Report, including data and metrics, program accomplishments, and challenges.
• Document stakeholder actions and decisions.
• Manage C‑InT inquiries and maintain and update all C‑InTP led and supported cases in approved case management systems.
• Track cases end‑to‑end with comprehensive chronological analysis through final disposition and ensure proper archival and retention upon closure.

You Have:

• 4+ years of experience conducting research and analysis in support of DoD or IC missions such as CI, security and force protection, or cyber operations
• Experience with DITMAC reportable thresholds and Potential Risk Indicators (PRIs), DSoS, NITTF guidance, DoDI 5205.16, the National Insider Threat Policy, and SORN‑driven records management
• Ability to produce time‑critical briefings
• TS/SCI clearance
• HS diploma or GED

Nice If You Have:

• 4+ years of experience supporting Combatant Commands or enterprise threat detection programs
• Experience with C‑InTP hub stakeholder coordination including CI, LE, Security, HR, Legal, Behavioral Health, OPSEC, or IG
• Experience with UAM, UEBA, DLP, SIEM, case management tools, and command‑wide collaboration platforms
• Possession of strong critical thinking, pattern recognition, behavioral analysis, risk assessment, prioritization, and threat intelligence analysis skills
• Possession of excellent written and verbal communication skills
• Possession of discretion, professionalism, and ethical conduct
• Insider Threat Program Manager or Analyst Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $176,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Counter‑Insider Threat Program Analyst

The Opportunity:

Are you energized by being a part of a security team? Do you want to use your analytic tradecraft to protect critical national security equities? As a Counter‑Insider Threat Analyst supporting US Space Command’s Counter‑Insider Threat Program (C‑InTP), you’ll be on the first line of defense mitigating insider threats. You’ll triage and analyze indicators from multiple internal and external sources, correlate activity to govt reporting thresholds, and deliver rapid, well‑reasoned briefings that inform senior decision‑makers.

You’ll work across networks, using specific job‑related tools and help shape training, policy, and case management for a command‑wide program. If you thrive in fast‑paced environments, communicate crisply under time pressure, and bring disciplined judgment to sensitive matters, this role lets you make a direct impact on mission success.

Join us. The world can't wait.

What You’ll Work On:

• Conduct daily triage of insider threat information and data detection, including intake, analysis, coordination, and rapid reporting on risk trigger events and indicators relative to government thresholds.
• Support USSPACECOM exercises.
• Capture meeting minutes and track tasks for C‑InTP Hub stakeholders.
• Research, develop, maintain, and deliver consistent C‑InTP training, awareness materials, and briefing products.
• Deliver training at SCI indoctrinations, during National Insider Threat Awareness Month.
• Monitor and retrieve metrics for command‑mandated annual C‑InT computer‑based training.
• Draft, review, staff, and maintain C‑InTP policies, SOPs, and governing documents.
• Conduct semi‑annual policy and SOP reviews and recommend updates to reflect national‑level changes and enterprise best practices.
• Assist the PM annually with revising, publishing, and securing approval for the C‑InTP Annual Report, including data and metrics, program accomplishments, and challenges.
• Document stakeholder actions and decisions.
• Manage C‑InT inquiries and maintain and update all C‑InTP led and supported cases in approved case management systems.
• Track cases end‑to‑end with comprehensive chronological analysis through final disposition and ensure proper archival and retention upon closure.

You Have:

• 4+ years of experience conducting research and analysis in support of DoD or IC missions such as CI, security and force protection, or cyber operations
• Experience with DITMAC reportable thresholds and Potential Risk Indicators (PRIs), DSoS, NITTF guidance, DoDI 5205.16, the National Insider Threat Policy, and SORN‑driven records management
• Ability to produce time‑critical briefings
• TS/SCI clearance
• HS diploma or GED

Nice If You Have:

• 4+ years of experience supporting Combatant Commands or enterprise threat detection programs
• Experience with C‑InTP hub stakeholder coordination including CI, LE, Security, HR, Legal, Behavioral Health, OPSEC, or IG
• Experience with UAM, UEBA, DLP, SIEM, case management tools, and command‑wide collaboration platforms
• Possession of strong critical thinking, pattern recognition, behavioral analysis, risk assessment, prioritization, and threat intelligence analysis skills
• Possession of excellent written and verbal communication skills
• Possession of discretion, professionalism, and ethical conduct
• Insider Threat Program Manager or Analyst Certification

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $77,500.00 to $176,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees. This posting will close within 90 days from the Posting Date.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

Our people-first culture prioritizes the benefits of collaboration. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
• Onsite: If this position is listed as onsite, work will primarily be performed full‑time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.