Insider Threat Analyst - Onsite (DC Metro)

Zachary Piper Solutions; Camp Springs, Northern (MD, KY); Hybrid; USD 117,000 - 143,000; Full time

Benefits offered by this job

Full Benefits Package

Job summary

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in the Washington, DC metro area. This onsite role in Camp Springs, MD focuses on insider threat detection, risk mitigation, and incident response for critical systems and data.

The analyst will monitor alerts, investigate risky user activity, and develop Splunk dashboards and reports while collaborating with cybersecurity teams.

Qualifications

• Active Top Secret Clearance with SCI eligibility.
• Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk experience, including dashboards and search development.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Skills

Top Secret clearance

CISSP

Security+

Splunk

DLP

EDR/NDR

IAM

Teramind

Investigative reporting

Education

Bachelor's degree or equivalent experience

Tools

Splunk

Teramind

DLP

EDR/NDR

IAM

Job description

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in the Washington, DC metro area. This onsite role in Camp Springs, MD focuses on insider threat detection, risk mitigation, and incident response for critical systems and data.

The analyst will monitor alerts, investigate risky user activity, and develop Splunk dashboards and reports while collaborating with cybersecurity teams.