Insider Threat Hunt Analyst: UEBA & Analytics

Leidos; Springfield (VA); On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a Hunt Analyst to support the DHS Insider Threat Program (ITP). You will hunt, analyze, and correlate data to identify insider threat indicators, support UEBA/UAM tooling, and coordinate across the enterprise for timely responses.

The role requires strong analytic capability and experience with security tools within a DHS/ITP context. The position emphasizes proactive hunting, cross-team collaboration, and the ability to deliver clear briefings.

Qualifications

• Bachelor's degree required; 4–8 years insider threat experience or equivalent.
• Experience with intelligence cycle, analytic techniques, and Threat Assessment & Mitigation.
• Ability to deliver briefings to diverse audiences and excellent written/verbal skills.
• Knowledge of UAM platforms and insider threat frameworks; TS/SCI clearance.
• Willingness to obtain DHS CI Polygraph as needed.

Responsibilities

• Examine insider threat data to identify trends, patterns, and insights.
• Provide analytical support for UAM/UEBA tool operation.
• Monitor UAM platform and coordinate requirements across the enterprise.
• Research patterns of concerning behavior related to insider threats.
• Conduct proactive hunts across DHS networks to detect and mitigate malicious activity.
• Baseline user activity with UEBA and respond to high-priority alerts within 4 hours.

Skills

Insider threat analysis

Analytical techniques

Briefings

Written/verbal communication

UAM/UEBA familiarity

Education

Bachelor's degree

Master's degree preferred

Tools

UAM software

Cybersecurity toolsets

Open-Source toolsets

Job description

Leidos is seeking a Hunt Analyst to support the DHS Insider Threat Program (ITP). You will hunt, analyze, and correlate data to identify insider threat indicators, support UEBA/UAM tooling, and coordinate across the enterprise for timely responses.

The role requires strong analytic capability and experience with security tools within a DHS/ITP context. The position emphasizes proactive hunting, cross-team collaboration, and the ability to deliver clear briefings.