Insider Threat Hunt Analyst – UEBA & Data Analytics

Leidos Inc; Springfield (VA); On-site; USD 105,000 - 190,000; Full time

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement benefits

Job summary

Leidos seeks a Hunt Analyst to support the DHS Insider Threat Program (ITP) as part of the HEITS Contract. You will examine insider-threat data, identify trends, and provide proactive hunting across DHS networks using UEBA and UAM tools.

The role requires extensive experience in intelligence analysis, threat assessment, and the ability to brief diverse audiences. It involves shift-based schedules with potential 24x7 operations and security clearance requirements.

Qualifications

• Bachelor's degree and 12+ years of insider threat experience, or a Master's with 10+ years.
• Minimum 10+ years knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
• Minimum 10+ years knowledge of Threat Assessment & Mitigation Strategies.
• Excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
• Knowledge of current domestic and international threats to U.S. national security interests.

Responsibilities

• Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
• Provide analytical, program support services related to the operation of UAM/ UEBA tool.
• Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response.
• Conduct further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise.
• Provide proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
• Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
• Identify mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
• Utilize UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours).

Skills

Insider threat analysis

Analytical techniques

Briefing to diverse audiences

Threat assessment knowledge

Stakeholder networking

Education

Bachelor's degree + 12+ years experience

Master's degree + 10+ years experience

Tools

UAM/UEBA platforms

Cybersecurity tools

Job description

Leidos seeks a Hunt Analyst to support the DHS Insider Threat Program (ITP) as part of the HEITS Contract. You will examine insider-threat data, identify trends, and provide proactive hunting across DHS networks using UEBA and UAM tools.

The role requires extensive experience in intelligence analysis, threat assessment, and the ability to brief diverse audiences. It involves shift-based schedules with potential 24x7 operations and security clearance requirements.