Insider Threat Hunt Analyst: Advanced Analytics & UEBA

VulnU; Springfield (VA); On-site; USD 87,000 - 157,000; Full time

Benefits offered by this job

Retirement match

Paid parental leave

Equity

Job summary

Leidos Digital Sector is seeking a Hunt Analyst to support the Insider Threat Program (ITP) for DHS. You will analyze insider threat data, monitor UAM/UEBA platforms, and perform proactive threat hunting across DHS networks, coordinating across teams to mitigate risks and improve threat detection.

The role requires strong analytic and briefing skills, 4+ years of insider threat experience, and eligibility for TS/SCI with Poly. A Bachelor’s degree is required; a Master's is preferred.

Qualifications

• Bachelor's degree in a relevant field.
• 4+ years of insider threat experience or equivalent.
• Experience with intelligence cycle and analytic techniques.
• Strong briefing and communication skills.
• Knowledge of UAM/UEBA tools and open-source toolsets.
• Must be a U.S. citizen; TS/SCI with Poly is required or able to obtain.

Responsibilities

• Examine, analyze, and search insider threat data to identify trends and insights.
• Provide analytical support for operation of UAM/UEBA tools.
• Monitor UAM platform and coordinate responses across the enterprise.
• Research UAM patterns to identify insider threat risks.
• Conduct proactive insider threat hunting across DHS network using behavioral analytics.
• Perform continuous hunt operations across data sources and tools to identify patterns.
• Identify mitigation strategies to support the investigative team.
• Utilize UEBA and other tools to baseline activity and detect deviations.
• Respond to high-priority UAM alerts within 4 hours during business hours.

Skills

Analytical thinking

Written and verbal communication

Briefings to diverse audiences

Self-starter

Education

Bachelor's degree

Master’s degree (preferred)

Tools

User Activity Monitoring (UAM)

UEBA platforms

Open-Source toolsets

Job description

Leidos Digital Sector is seeking a Hunt Analyst to support the Insider Threat Program (ITP) for DHS. You will analyze insider threat data, monitor UAM/UEBA platforms, and perform proactive threat hunting across DHS networks, coordinating across teams to mitigate risks and improve threat detection.

The role requires strong analytic and briefing skills, 4+ years of insider threat experience, and eligibility for TS/SCI with Poly. A Bachelor’s degree is required; a Master's is preferred.