Insider Threat Intelligence Analyst

DEFTEC Corporation; Huntsville (AL); On-site; USD 110,000 - 170,000; Full time

Job summary

DEFTEC Corporation seeks an Insider Threat Analyst to support InTO at Redstone Arsenal. You will fuse diverse data sources, run large-scale analytics in SQL/Python, and produce decision-quality visuals using Power BI/Tableau.

Responsibilities include monitoring UAM/DLP/UBA/SIEM, triaging alerts, and developing repeatable detections with KQL/SPL and automation in Python/Excel VBA. The role requires TS/SCI clearance, a Bachelor's degree or 8+ years of related experience, and 4+ years in

Qualifications

• Active TS/SCI clearance is required.
• Bachelor's degree or equivalent experience (8+ years) in national-security or related field.
• Minimum 4 years performing analytical/research functions in security environments.
• Strong proficiency with Microsoft Office and Google Chrome; able to multitask across windows.
• Proven ability to brief and collaborate with diverse stakeholders.
• Ability to explain quantitative analyses to non-technical audiences.

Responsibilities

• Research, fuse, and analyze large datasets to identify insider-threat trends and COAs.
• Monitor insider-threat across UAM/DLP/UBA/SIEM; triage alerts and perform log analysis.
• Build and tune data pipelines, queries, and automations per SOPs.
• Utilize Purview, Defender, Sentinel, Azure services, and related tools to detect data misuse.
• Access classified/open-source data; ensure secure processing and storage per SOPs.
• Compare multi-source reporting to find correlations; generate leads and alerts.
• Develop analytics (SQL/Python) for large-scale analysis and data exploration.
• Produce concise analytic products; present findings to stakeholders.
• Provide support for data and case requests; create Splunk/Sentinel/Power BI views.

Skills

Communication

Presentation skills

Analytical thinking

Problem solving

Education

Bachelor's degree or 8+ years experience in lieu of degree

Tools

Splunk

Microsoft Sentinel

Power BI

Tableau

Excel (VBA)

KQL

SPL

Purview/Defender

Azure

Job description

DEFTEC Corporation seeks an Insider Threat Analyst to support InTO at Redstone Arsenal. You will fuse diverse data sources, run large-scale analytics in SQL/Python, and produce decision-quality visuals using Power BI/Tableau.

Responsibilities include monitoring UAM/DLP/UBA/SIEM, triaging alerts, and developing repeatable detections with KQL/SPL and automation in Python/Excel VBA. The role requires TS/SCI clearance, a Bachelor's degree or 8+ years of related experience, and 4+ years in