Insider Threat Analyst with Security Clearance

PKH Enterprises, LLC; Washington (District of Columbia); On-site; USD 110,000 - 170,000; Full time

Job summary

PKH Enterprises is seeking an Insider Threat/UAM Analyst to support a federal client in Washington, DC. The role focuses on detecting, analyzing, and mitigating insider threats and monitoring user activity data to identify anomalous behavior.

The ideal candidate will have a TS/SCI clearance, 5+ years in UAM or insider threat, and experience developing dashboards, filters, and audit policy triggers, with familiarity in network traffic analysis, intrusion detection, and forensic investigations.

Qualifications

• Bachelor's degree in cybersecurity, information assurance, or related field (or equivalent experience).
• 5 years of relevant experience in UAM or insider threat detection.
• Ability to develop dashboards, filters, and audit policy triggers.
• Familiarity with network traffic analysis, intrusion detection, and forensic investigations.
• Active TS/SCI clearance required.
• Certifications: CISSP, CEH, Security+, or DoD-8570 IAT Level II.
• Knowledge of Windows, Linux, Unix operating systems.
• Experience with UAM tools.

Responsibilities

• Monitor & Analyze user activity data to detect anomalous behavior and potential insider threats.
• Triage & Investigate alerts, documenting findings and reporting them through case management systems.
• Develop & Implement countermeasures against known adversarial TTPs.
• Collaborate with cybersecurity, counterintelligence, and law enforcement teams to refine detection strategies.
• Conduct forensic analysis on network traffic, intrusion attempts, and data loss prevention technologies.
• Support Insider Threat Programs by integrating multiple security data sources and refining detection triggers.
• Provide Briefings & Reports to leadership on trends, risks, and mitigation strategies.

Skills

UAM / insider threat experience

Dashboard development

Network traffic analysis

Intrusion detection

Forensic investigations

OS knowledge (Windows/Linux/Unix)

UAM tools

Education

Bachelor's degree in cybersecurity or related field

Tools

UAM tools

Job description

Insider Threat/UAM Analyst – PKH Enterprises is looking for a User Activity Monitoring (UAM) Analysts to support a federal client. These analysts will play a crucial role in detecting, analyzing, and mitigating potential security risks. This work will be onsite in Washington, DC.

Responsibilities

• Monitor & Analyze user activity data to detect anomalous behavior and potential insider threats.
• Triage & Investigate alerts, documenting findings and reporting them through case management systems.
• Develop & Implement countermeasures against known adversarial tactics, techniques, and procedures (TTPs).
• Collaborate with cybersecurity, counterintelligence, and law enforcement teams to refine detection strategies.
• Conduct Forensic Analysis on network traffic, intrusion attempts, and data loss prevention technologies.
• Support Insider Threat Programs by integrating multiple security data sources and refining detection triggers.
• Provide Briefings & Reports to leadership on trends, risks, and mitigation strategies.

Required

• Education: Bachelor's degree in cybersecurity, information assurance, or related field (or equivalent experience).
• 5 years relevant experience in UAM or insider threat detection, including ability to develop dashboards, filters, and audit policy triggers.
• Familiarity with network traffic analysis, intrusion detection, and forensic investigations.
• Certifications: CISSP, CEH, Security+, or DoD-8570 IAT Level II.
• Clearance: Candidates must hold an active TS/SCI clearance. Preferred Experience:
• Knowledge of Windows, Linux, Unix operating systems.
• Experience with UAM tools
• Ability to develop dashboards, filters, and audit policy triggers.