Insider Threat Hunt Analyst — UEBA & UAM

Leidos; Springfield (VA); On-site; USD 105,000 - 190,000; Full time

Job summary

The Digital Sector at Leidos has an opening for a Hunt Analyst supporting the HEITS Contract as part of the DHS Insider Threat Program. The role focuses on identifying insider threat indicators and evolving the database backbone of the ITP.

Responsibilities include hunting across data sources, monitoring UAM/UEBA platforms, and coordinating with security stakeholders to mitigate threats. Requires TS/SCI and US citizenship.

Qualifications

• Bachelor's degree and 12+ years of prior relevant insider threat experience or Masters with 10+ years of prior relevant experience.
• Minimum of 10+ years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
• Minimum of 10+ years demonstrated knowledge of Threat Assessment & Mitigation Strategies.
• Excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
• Knowledge of current domestic and international threats to U.S. national security interests.
• Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
• Be a self-starter capable of working independently to promote program goals.
• Working knowledge of User Activity Monitoring Software (UAM) and solutions.
• Working knowledge of Cybersecurity toolsets designed to support ITP mission activities.
• Working Knowledge of Open-Source toolsets.
• Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway.
• Current TS/SCI and Must be a US Citizen.
• Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph.

Responsibilities

• Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
• Provide analytical, program support services related to the operation of UAM/ UEBA tool.
• Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response.
• Provide proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
• Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.

Skills

Insider threat analysis

UAM/UEBA knowledge

Data analytics

Intelligence cycle knowledge

Briefing/presentation skills

Networking with security stakeholders

Education

Bachelor's degree

Master's degree

Tools

UAM tools

UEBA platforms

Cybersecurity toolsets

Open-source toolsets

Job description

The Digital Sector at Leidos has an opening for a Hunt Analyst supporting the HEITS Contract as part of the DHS Insider Threat Program. The role focuses on identifying insider threat indicators and evolving the database backbone of the ITP.

Responsibilities include hunting across data sources, monitoring UAM/UEBA platforms, and coordinating with security stakeholders to mitigate threats. Requires TS/SCI and US citizenship.