Insider Threat & Digital Forensics Analyst

Leidos Inc; Ashburn (VA); On-site; USD 107,900 - 195,050; Full time

Job summary

Leidos Inc. seeks an experienced Insider Threat Expert to join the CBP Cyber Security Directorate’s SOC. You will lead user activity monitoring, insider threat analysis, and investigations into data loss, policy violations, and sensitive data spills.

The role requires conducting forensic analysis, generating forensically sound cyber analysis reports, and coordinating with OPR/OI/OIG and other agencies. You will work in Ashburn, VA with TS clearance requirements.

Qualifications

• Requires BS degree and 8+ years of direct relevant experience.
• Active and current CISSP certification.
• Degree in computer science, IT, Information/Cyber Security field from an accredited college.
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, and IT device integrity.
• Demonstrated forensic analysis, digital media analysis, and in-depth system & network log analysis in support of investigations.
• Must be a U.S. citizen with a Top Secret clearance and ability to obtain CBP BI clearance.

Responsibilities

• Support Cyber Defense Forensics and Insider Threat investigations via near real-time monitoring of DLP tools.
• Support investigations with other Government Agencies into CBP personnel behavior.
• Monitor Foreign Service National network activity for misuse and policy violations.
• Support User Activity Monitoring (UAM) activities.
• Recommend insider threat alert triggers and detections across security tools and logs.
• Monitor CBP laptops and mobile devices for suspicious activity.
• Provide investigative support for media leak investigations by identifying users who accessed leaks.
• Provide recommendations for Information Spillage Incident Response per NIST 800-88.

Skills

CISSP certification

Forensic analysis

Digital forensics

Threat monitoring

Incident reporting

Education

BS degree in Computer Science / IT / Information Security

Master's degree (preferred)

Tools

EDR tools

DLP tools

Security monitoring platforms

Job description

Leidos Inc. seeks an experienced Insider Threat Expert to join the CBP Cyber Security Directorate’s SOC. You will lead user activity monitoring, insider threat analysis, and investigations into data loss, policy violations, and sensitive data spills.

The role requires conducting forensic analysis, generating forensically sound cyber analysis reports, and coordinating with OPR/OI/OIG and other agencies. You will work in Ashburn, VA with TS clearance requirements.