Insider Threat Detection & Investigation Analyst

MartinFed; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

MartinFed is seeking an experienced Insider Threat Analyst to support the Insider Threat Program Detection and Prevention. You will monitor logs and alerts across security platforms, analyze user activity to distinguish real threats from false positives, and escalate cases under established procedures.

You will help tune detection rules, maintain case documentation, and collaborate with SOC, HR, Legal, and other stakeholders while ensuring privacy protections and compliance with federal guidance.

Qualifications

• 6 years of cybersecurity, security operations, investigations, or insider threat experience.
• Experience with enterprise insider threat tools and analytics.

Responsibilities

• Monitor logs, dashboards, and alerts to identify insider threat activity.
• Perform initial triage and investigate alerts; escalate as needed.
• Configure, tune, and troubleshoot detection rules and analytics.
• Document findings via clear reports and case summaries.
• Collaborate with SOC, HR, Legal, and others to improve program.

Skills

Insider Threat Monitoring

SIEM/UEBA

DLP/UAM platforms

Windows/Linux/Unix

Analytical writing

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

DTEX

Purview

Proofpoint/ObserveIT

Exabeam

Job description

MartinFed is seeking an experienced Insider Threat Analyst to support the Insider Threat Program Detection and Prevention. You will monitor logs and alerts across security platforms, analyze user activity to distinguish real threats from false positives, and escalate cases under established procedures.

You will help tune detection rules, maintain case documentation, and collaborate with SOC, HR, Legal, and other stakeholders while ensuring privacy protections and compliance with federal guidance.