Insider Threat & Cyber Investigations Analyst

Peraton; Virginia; Hybrid; USD 90,000 - 150,000; Full time

Job summary

Peraton is seeking a Cyber Investigations Analyst to join the Federal Strategic Cyber Group. Located in Rosslyn, VA, this full-time role offers a hybrid schedule after 90 days.

You will support insider threat investigations using user activity monitoring tools, analyze logs, and develop detection rules to protect enterprise systems. The ideal candidate has a bachelor's degree with several years of cybersecurity or digital forensics experience, a Security+ CE certification, excellent reporting

Qualifications

• Bachelor’s degree with 5 years of experience; 4 years may substitute for the degree.
• Minimum 2 years experience in cybersecurity, digital forensics, or cyber investigations.
• Must possess or obtain Security+ CE before start date.
• Experience conducting insider threat investigations in an enterprise environment.
• Experience analyzing large datasets of user activity, log data, and endpoint telemetry.
• Excellent written and verbal communication, including formal investigative reports.
• U.S. citizenship required and Active Top Secret security clearance; ability to obtain TS/SCI if needed.

Responsibilities

• Support CTAD in end-to-end insider threat and cyber investigations using UAM data.
• Collect, analyze, and interpret log data to detect anomalous user behavior and policy violations.
• Develop and refine detection rules, alerts, and behavioral baselines.
• Conduct forensic analysis of logs, endpoint telemetry, and network data to support investigations.
• Communicate findings to technical and non-technical stakeholders, including senior management.
• Collaborate with legal, HR, and security to ensure compliant investigations.
• Author detailed investigation reports, bulletins, and advisories.

Skills

Cybersecurity experience

Digital forensics

Insider threat investigations

Data analysis

Communication skills

Education

Bachelor's degree

Security+ CE

Tools

Splunk

Microsoft Sentinel

EnCase

FTK

Azure AD

Job description

Peraton is seeking a Cyber Investigations Analyst to join the Federal Strategic Cyber Group. Located in Rosslyn, VA, this full-time role offers a hybrid schedule after 90 days.

You will support insider threat investigations using user activity monitoring tools, analyze logs, and develop detection rules to protect enterprise systems. The ideal candidate has a bachelor's degree with several years of cybersecurity or digital forensics experience, a Security+ CE certification, excellent reporting