Insider Threat Analyst: Detect, Analyze & Defend

Agile Defense, Inc.; Washington; On-site; USD 110,000 - 135,000; Full time

Job summary

Agile Defense, Inc. is seeking an Insider Threat Analyst to support the Insider Threat Program Detection and Prevention (ITPDP).

You will monitor and triage alerts across multiple enterprise applications, distinguishing genuine insider threat incidents from false positives while upholding privacy and civil liberties guidelines. Ideal candidates have a BS/BA or equivalent experience, about 6 years in cybersecurity or insider threat fields, and hands-on experience with SIEM/UEBA tools such as

Qualifications

• BS/BA degree, or additional related experience in lieu of a degree.
• Approximately 6 years of combined experience in cybersecurity, security operations, investigations, or insider threat analysis.
• U.S. citizenship and ability to obtain/maintain a Tier 5 security clearance or higher.
• Hands-on experience with enterprise insider threat, DLP, SIEM, or UEBA/UAM tools.

Responsibilities

• Monitor and analyze logs and alerts to determine insider threat incidents vs. false positives.
• Triage and investigate potential indicators, escalating as needed.
• Support configuration, tuning, and troubleshooting of triggers for insider threat detection.
• Assist with deployment, operation, and maintenance of enterprise tools for insider threat.
• Document findings with clear analytical write-ups and maintain case records.
• Correlate data across sources to build a complete threat picture.
• Develop and refine workflows, playbooks, and program documentation.
• Ensure activities protect privacy and civil liberties and meet legal requirements.
• Coordinate with SOC, investigators, and other stakeholders as directed.

Skills

Log analysis

Written communication

Analytical thinking

Team coordination

Education

BS/BA degree or related experience

Tools

Splunk

DTEX

Proofpoint/ObserveIT

Microsoft Purview

Exabeam

Job description

Agile Defense, Inc. is seeking an Insider Threat Analyst to support the Insider Threat Program Detection and Prevention (ITPDP).

You will monitor and triage alerts across multiple enterprise applications, distinguishing genuine insider threat incidents from false positives while upholding privacy and civil liberties guidelines. Ideal candidates have a BS/BA or equivalent experience, about 6 years in cybersecurity or insider threat fields, and hands-on experience with SIEM/UEBA tools such as