Insider Threat & Forensics Analyst

Leidos LLC; Ashburn (VA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is recruiting an Insider Threat Expert to join the CBP Cyber Security team. You will lead forensics investigations, monitor user activity, and assess insider threats across CBP networks and devices.

The role requires a BS in IT/Cyber Security, CISSP, and active clearance (Top Secret) with ability to obtain CBP BI clearance. You will report to the Ashburn, VA area and collaborate with OPR/OIG and other government agencies.

Qualifications

• Requires BS degree and 8+ years of direct relevant experience.
• Active CISSP certification is required.
• Degree in IT/Cyber Security from an accredited college or university.
• US citizenship and ability to obtain CBP/DoD clearances.

Responsibilities

• Lead insider threat investigations using real-time monitoring and forensics.
• Monitor FSN network activity for misuse and policy violations.
• Support User Activity Monitoring (UAM) efforts.
• Recommend insider threat alert triggers across security tools.
• Monitor CBP laptops and mobile devices for policy violations.
• Provide investigative support for media leak investigations and data spill handling.
• Contribute to information spillage incident response guidance.

Skills

Forensics analysis

DLP monitoring

User Activity Monitoring

EDR tools

Incident response

Policy violations investigation

Security tool optimization

FSN monitoring

Education

BS degree in IT / Cyber Security

CISSP certification

MS degree preferred

Tools

DLP tools

EDR tools

User Activity Monitoring products

Forensic software

Job description

Leidos is recruiting an Insider Threat Expert to join the CBP Cyber Security team. You will lead forensics investigations, monitor user activity, and assess insider threats across CBP networks and devices.

The role requires a BS in IT/Cyber Security, CISSP, and active clearance (Top Secret) with ability to obtain CBP BI clearance. You will report to the Ashburn, VA area and collaborate with OPR/OIG and other government agencies.