Insider Threat Hunter — Advanced Analytics & UEBA

CriticalSolutions, LLC; Springfield (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Critical Solutions is seeking an Insider Threat Program Hunt Team Analyst to support our federal customer in Springfield, VA. This role focuses on identifying insider threats through advanced analytics, monitoring, and data correlation within the Insider Threat Program (ITP).

You will work on hunting across data sources, coordinating with security stakeholders, and refining detection methods to safeguard agency missions.

Qualifications

• Active Top Secret/SCI clearance or eligible.
• Bachelor's degree with 8+ years of related insider threat experience, or Master's with 6+ years.
• 4+ years knowledge of the intelligence cycle, analytic techniques, and organizational processes.
• 4+ years knowledge of Threat Assessment & Mitigation Strategies.
• Strong written and verbal briefing skills for diverse audiences.
• Willingness to obtain EOD SCI and CI Polygraph as required.

Responsibilities

• Examine, analyze, and search insider threat data to identify trends and insights.
• Provide analytical support related to the operation of UAM/UEBA tools.
• Monitor UAM platform and coordinate across the enterprise for timely responses.
• Research the UAM platform to identify patterns of concerning insider threat behavior.
• Proactively hunt insider threat indicators across the Agency network using behavioral analytics.
• Conduct continuous hunt operations across data sources, EDR tools, and network traffic.

Skills

Active TS/SCI clearance

US Citizenship

Analytical techniques

Insider threat knowledge

Threat assessment & mitigation

Briefing skills

Education

Bachelor's degree

Master's degree

Tools

UAM software/tools

Cybersecurity toolsets

Open-Source toolsets

Job description

Critical Solutions is seeking an Insider Threat Program Hunt Team Analyst to support our federal customer in Springfield, VA. This role focuses on identifying insider threats through advanced analytics, monitoring, and data correlation within the Insider Threat Program (ITP).

You will work on hunting across data sources, coordinating with security stakeholders, and refining detection methods to safeguard agency missions.