Insider Threat Hunt Analyst — UEBA & DHS Analytics

Leidos; Springfield (VA); On-site; USD 105,000 - 190,000; Full time

Job summary

Leidos is seeking a Hunt Analyst to support the DHS Insider Threat Program. This role will hunt, correlate, and analyze insider threat data across DHS platforms, using UAM/UEBA tools to detect anomalies and guide investigations.

The candidate will coordinate across teams, sustain and evolve the database backbone of the ITP, and contribute to threat mitigation strategies while operating within a TS/SCI and US citizenship requirement.

Qualifications

• Bachelor''s degree with 12+ years of insider threat experience or Master''s with 10+ years of experience.
• Excellent written and verbal communication; ability to brief diverse audiences.
• Knowledge of intelligence cycle, analytic techniques, and threat assessment/mitigation.
• UAM knowledge and cybersecurity tooling experience.
• U.S. TS/SCI clearance and US citizenship.
• Able to work independently and in teams; strong networking with security stakeholders.

Responsibilities

• Examine, analyze, and search insider threat data to identify trends and insights.
• Monitor UAM/UEBA platforms and identify emerging insider threat requirements.
• Conduct proactive insider threat hunts across DHS networks and data sources.
• Identify mitigation strategies to assist investigative teams in reducing risk.
• Provide timely response to critical alerts (within 4 hours during business hours).

Education

Bachelor''s degree plus 12+ years experience

Master''s degree plus 10+ years experience

Tools

UAM platform

Cybersecurity toolsets

Open-Source toolsets

Job description

Leidos is seeking a Hunt Analyst to support the DHS Insider Threat Program. This role will hunt, correlate, and analyze insider threat data across DHS platforms, using UAM/UEBA tools to detect anomalies and guide investigations.

The candidate will coordinate across teams, sustain and evolve the database backbone of the ITP, and contribute to threat mitigation strategies while operating within a TS/SCI and US citizenship requirement.