Insider Threat Analyst

NR Labs LLC; Washington (District of Columbia); Hybrid; USD 95,000 - 130,000; Full time

Job summary

NR Labs LLC in Washington, DC, is seeking an experienced Insider Threat Analyst to join our security operations.

The role focuses on developing insider threat programs, monitoring alerts, and analyzing risk activity using Microsoft Sentinel and other tools.

Candidates should have a BS in cybersecurity/IT, 3+ years in related fields, and relevant certifications; onsite requirement three days weekly.

Qualifications

• BS/BA in Cybersecurity or Information Technology from a U.S. accredited college or university.
• 3+ years of experience in insider threat, law enforcement, intelligence, counterintelligence, corporate security or investigations.
• CISSP, GIAC, CEH, Security+, Network+ or equivalent certification(s).
• Experience developing and implementing an insider threat program with policies, procedures and tools.
• Experience monitoring alerts, triaging events, and analyzing insider threat/risk activities.

Responsibilities

• Develop, implement, and manage insider threat programs, including policies, procedures, and tools.
• Monitor alerts, triage security events, and analyze potential insider threat or risk activities.
• Gather, analyze, and assess threat intelligence from internal and external sources to identify emerging threats and vulnerabilities.
• Leverage Microsoft Security Tools (e.g., Sentinel) in both Azure and non-Azure environments to detect and respond to threats.
• Collaborate with security teams, HR, legal, and management to investigate and address insider threat incidents.
• Maintain comprehensive documentation and reporting for investigations and risk assessments.

Skills

Insider threat

Security operations

Threat intelligence

Microsoft Sentinel

Policy development

Incident coordination

Education

Bachelor's in Cybersecurity or IT

Tools

Qualys

CrowdStrike

Cloudflare

CyberArk

SolarWinds

Job description

About the Role:

We are seeking a highly skilled Insider Threat Analyst to support our security operations by identifying, analyzing, and mitigating risks from potential insider threats. The ideal candidate will have a strong background in security, intelligence, or investigations and be adept at developing insider threat programs, monitoring suspicious activity, and gathering threat intelligence to safeguard our organization’s assets.

Role Responsibilities:

• Develop, implement, and manage insider threat programs, including policies, procedures, and tools.
• Monitor alerts, triage security events, and analyze potential insider threat or risk activities.
• Gather, analyze, and assess threat intelligence from internal and external sources to identify emerging threats and vulnerabilities.
• Leverage Microsoft Security Tools (e.g., Sentinel) in both Azure and non-Azure environments to detect and respond to threats.
• Collaborate with security teams, HR, legal, and management to investigate and address insider threat incidents.
• Maintain comprehensive documentation and reporting for investigations and risk assessments.

Required Qualifications & Education:

• BS/BA Degree in Cybersecurity or Information Technology from a U.S. accredited college, university, or institution.
• 3+ years of experience working in any of the following fields: insider threat; law enforcement; intelligence (collection, targeting, or analysis); counterintelligence; corporate security; and investigations.
• CISSP, GIAC, CEH, Security +, Network +, or equivalent Certification(s).
• Experience developing and implementing an insider threat program, including policies, procedures, and tools.
• Experience monitoring alerts, triaging events, and performing analysis into potential insider threat/risk activities.
• Experience gathering and analyzing threat intelligence from internal and external sources to identify emerging threats and vulnerabilities.
• Experience with Microsoft Security Tools (e.g., Sentinel) that is either part of or independent of the Microsoft Azure offering.
• Additional experience and critical knowledge preferred with the following tools: Qualys, Crowdstrike, Cloudflare, CyberArk, Solarwinds.
• Has excellent oral, writing, and team skills.

Clearance and Location Requirements:

• Able to be cleared for a Public Trust clearance.
• This position requires to be onsite 3 days per week in Washington, DC.