Insider Threat Analyst

Motion Recruitment; Tysons (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking an Insider Threat Analyst to identify, investigate, and mitigate insider threats across client organizations in the Washington, DC area. You will monitor security alerts, analyze threat activity, and collaborate with security, HR, legal, and management teams to strengthen the organization's insider threat program.

The role emphasizes hands-on monitoring using Microsoft Sentinel and other security tools, developing insider threat policies, and documenting

Qualifications

• 3+ years in insider threat, intelligence, or related fields.
• Bachelor’s degree in a relevant field from a U.S. accredited institution.
• Experience developing or implementing an insider threat program.
• Hands-on experience monitoring alerts and investigating insider threats.
• Public Trust eligibility or ability to obtain one.
• Onsite work 3 days per week in Washington, DC.

Responsibilities

• Monitor security alerts and investigate insider threat and risk activity.
• Develop and maintain insider threat policies, procedures, and security controls.
• Gather and analyze internal and external threat intelligence to identify emerging risks.
• Use Microsoft security tools, including Sentinel, to detect and respond to suspicious activity.
• Partner with security, HR, legal, and management teams on insider threat investigations.
• Document investigations, findings, risk assessments, and remediation activities.

Skills

Insider threat

Threat intelligence

Security monitoring

Incident investigation

Security controls

Cross-functional collaboration

Education

Bachelor's in Cybersecurity

Tools

Microsoft Sentinel

Qualys

CrowdStrike

Cloudflare

CyberArk

SolarWinds

Job description

A growing cybersecurity firm in DC is seeking an Insider Threat Analyst to identify, investigate, and mitigate potential insider threats across the organization. This role will work closely with security, HR, legal, and management teams to monitor suspicious activity, analyze threat intelligence, and strengthen the organization's insider threat program.

Responsibilities

• Monitor security alerts and investigate potential insider threat and risk activity.
• Develop and maintain insider threat policies, procedures, and security controls.
• Gather and analyze internal and external threat intelligence to identify emerging risks.
• Use Microsoft security tools, including Sentinel, to detect and respond to suspicious activity.
• Partner with security, HR, legal, and management teams on insider threat investigations.
• Document investigations, findings, risk assessments, and remediation activities.

Required Qualifications

• 3+ years of experience in insider threat, intelligence, counterintelligence, law enforcement, corporate security, or investigations.
• Bachelor's degree in Cybersecurity, Information Technology, or a related field from a U.S. accredited institution.
• Experience developing or implementing an insider threat program.
• Hands-on experience monitoring alerts, triaging security events, and investigating potential insider threats.
• Experience with Microsoft security tools such as Sentinel; experience with Qualys, CrowdStrike, Cloudflare, CyberArk, or SolarWinds is a plus.
• Security certification such as CISSP, GIAC, CEH, Security+, Network+, or equivalent.
• Currently hold a Public Trust or have the ability to obtain one.
• Ability to work onsite 3 days per week in Washington, DC.