Insider Threat Investigator – Onsite DC Area

Piper Companies; Camp Springs (MD); Sur place; USD 78 000 - 130 000; Plein temps

Résumé du poste

Zachary Piper Solutions seeks an Insider Threat Support Analyst to support a federal agency in the Washington DC area. The role focuses on insider threat detection, risk mitigation, and investigation of suspicious activity within a cybersecurity program.

Responsibilities include monitoring alerts, performing investigations, and developing Splunk dashboards. Requires TS clearance with SCI eligibility, Security+ or CISSP, and 2+ years of insider threat experience.

Qualifications

• Active TS clearance with SCI eligibility.
• Security+ or CISSP or equivalent certification.
• Bachelor's degree or 2+ years insider threat experience.
• 2+ years Splunk experience with dashboards/searches.
• Experience with DLP, EDR/NDR, IAM and Teramind.
• Strong analytical, investigative, documentation, and communication skills.

Responsabilités

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Connaissances

Top Secret Clearance with SCI

Security+ or CISSP

Analytical skills

Communication skills

Formation

Bachelor's degree

2+ years insider threat or user activity monitoring experience

Outils

Splunk

Splunk dashboards

DLP

EDR/NDR

IAM

Teramind

Description du poste

Zachary Piper Solutions seeks an Insider Threat Support Analyst to support a federal agency in the Washington DC area. The role focuses on insider threat detection, risk mitigation, and investigation of suspicious activity within a cybersecurity program.

Responsibilities include monitoring alerts, performing investigations, and developing Splunk dashboards. Requires TS clearance with SCI eligibility, Security+ or CISSP, and 2+ years of insider threat experience.