Insider Threat Analyst & Detection Engineer

MartinFederal Consulting, LLC; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

MartinFed is seeking an experienced Insider Threat Analyst to support the Insider Threat Program Detection and Prevention (ITPDP). You will monitor logs, analyze user activity, and triage potential insider threat incidents across enterprise environments, ensuring alignment with federal policies and privacy protections.

Under the Senior Insider Threat Analyst, you will contribute to detection engineering, incident investigation, and documentation, delivering clear case summaries while

Qualifications

• U.S. Citizen with ability to obtain Tier 5 clearance.
• Bachelor's degree in Cybersecurity, IT, Criminal Justice, or related field.
• Approximately 6 years of combined cybersecurity experience.
• Hands-on experience with insider threat, DLP, SIEM, UEBA, or UAM platforms (e.g., Splunk, DTEX, Purview, ObserveIT, Exabeam).
• Experience analyzing logs and differentiating incidents from false positives.
• Working knowledge of Windows, Linux, and Unix.
• Understanding of insider threat methodologies and analytics.
• Familiarity with digital forensics concepts and log analysis.
• Knowledge of privacy and civil liberties considerations in federal programs.
• Excellent analytical and written communication skills.
• Ability to work under guidance of senior analysts.
• Ability to obtain Counter-Insider Threat Fundamentals Certification if required.

Responsibilities

• Monitor logs, dashboards, and alerts to identify insider threat activity.
• Analyze user activity and system events to distinguish incidents from false positives.
• Continuously monitor enterprise environments for indicators of insider threat behavior.
• Perform initial triage and investigation of alerts.
• Correlate information from multiple data sources to understand activity.
• Escalate incidents per procedures.
• Maintain complete case documentation.
• Configure and tune detection rules and analytics.
• Support deployment and operation of insider threat technologies.
• Improve detection fidelity by reducing false positives.
• Document investigative findings with clear reports.
• Develop workflows and SOPs for the program.
• Coordinate with SOC, HR, Legal and other stakeholders.

Skills

Security clearance

Cybersecurity experience

SIEM

UEBA/UAM

Log analysis

Windows/Linux/Unix

Digital forensics

Privacy & civil liberties

Analytical writing

Team collaboration

Education

Bachelor's degree

Tools

Splunk

Microsoft Purview

DTEX

ObserveIT

Exabeam

Job description

MartinFed is seeking an experienced Insider Threat Analyst to support the Insider Threat Program Detection and Prevention (ITPDP). You will monitor logs, analyze user activity, and triage potential insider threat incidents across enterprise environments, ensuring alignment with federal policies and privacy protections.

Under the Senior Insider Threat Analyst, you will contribute to detection engineering, incident investigation, and documentation, delivering clear case summaries while