Insider Threat Monitoring Analyst - Mid-Level [U.S. Citizenship & CBP BI - High Trust Required]

Via Logic LLC; Ashburn (VA); On-site; USD 106,000 - 126,000; Full time

Benefits offered by this job

Healthcare coverage

Paid time off

Federal mission impact

Job summary

Via Logic LLC in Ashburn, VA, is hiring a Mid-Level Insider Threat Monitoring Analyst to support CBP cybersecurity operations onsite at a government site. You will analyze user behavior, monitor security events, and investigate alerts to identify insider threats, data loss, or policy concerns, while documenting findings and coordinating with government staff.

This role requires 3+ years of relevant experience, U.S.

Qualifications

• 3+ years of relevant professional experience in cybersecurity operations.
• Experience analyzing user activity, security events, alerts, and logs to identify anomalies.
• Familiarity with CBP or government security requirements is a plus.

Responsibilities

• Analyze user behavior and security events to identify insider threat indicators.
• Monitor DLP and UAM tools for investigations.
• Investigate data exfiltration and policy violations involving CBP data.
• Document findings and contribute to incident notifications and reports.
• Collaborate with government staff and security analysts during investigations.

Skills

Cybersecurity operations

Insider threat monitoring

Security investigations

Incident detection & response

Cyber forensics

Data analysis

Tools

DLP tools

UAM tools

Job description

Insider Threat Monitoring Analyst - Mid-Level [U.S. Citizenship & CBP BI - High Trust Required]

Ashburn, VA

Start Your Adventure at Via Logic

Location: Primarily onsite at a government site in Ashburn, VA. Specific worksite expectations will be confirmed for the assignment.
Type: Full-time, W-2
Compensation: $106,000–$126,000 annually, depending on experience and qualifications.
Experience: 3+ years of relevant experience

Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As a Mid-Level Insider Threat Monitoring Analyst, you'll support insider threat monitoring activities by analyzing user behavior, access patterns, and security events to identify potential insider threat indicators.

You'll use insider threat monitoring and security tools to identify anomalous activity, investigate alerts, and determine whether activity may represent an insider threat, data loss, or security policy concern. You'll also support security investigations and help document findings that protect sensitive information and government systems.

Eligibility & Clearance Requirements

Due to CBP contract requirements, applicants must:

• Be a U.S. citizen.
• Be able to obtain and maintain the required CBP background investigation and suitability determination for access to government facilities and systems.
• Be available to work onsite, primarily in Ashburn, VA, with specific worksite and travel expectations confirmed for the assignment.

Your Mission

• Support insider threat monitoring activities by analyzing user behavior, access patterns, security events, and other relevant activity for potential insider threat indicators.
• Monitor Data Loss Prevention (DLP) solutions and other applicable security tools to support insider threat and security operations investigations.
• Investigate DLP alerts involving potential data exfiltration of CBP mission data or sensitive employee information.
• Support User Activity Monitoring (UAM) activities and investigative tasks as directed by government staff.
• Monitor network activity for potential misuse and security policy violations.
• Analyze alerts and investigative information to identify suspicious or anomalous activity and support appropriate investigative action.
• Support investigations involving potential malicious activity, alleged criminal activity, or unauthorized disclosure of information.
• Support sensitive-data spillage response by helping assess incidents and recommending appropriate handling and sanitization methods in accordance with applicable guidance and procedures.
• Monitor government laptops and mobile devices associated with foreign travel for suspicious activity and policy violations.
• Recommend improvements to insider threat alert triggers and detections across security tools and logging sources.
• Document investigative activity and contribute to incident notifications, case analysis, reports, and other required work products.

What You Bring to the Expedition

• 3+ years of relevant professional experience in cybersecurity operations, insider threat monitoring, security investigations, incident detection and response, cyber forensics, or a related area.
• Experience analyzing user activity, security events, alerts, logs, or similar technical data to identify suspicious or anomalous behavior.
• Experience investigating or supporting investigations involving security incidents, policy violations, data loss, or potentially unauthorized activity.
• Knowledge of Data Loss Prevention (DLP), User Activity Monitoring (UAM), or similar security monitoring concepts and capabilities.
• Ability to analyze information from multiple sources, identify relevant patterns or concerns, and document investigative findings clearly.
• Ability to communicate technical findings and collaborate effectively with security analysts, investigators, government personnel, and other stakeholders.

Preferred qualifications:

• Experience working within or closely alongside a Security Operations Center or insider threat program.
• Hands-on experience with DLP or UAM tools and workflows.
• Experience supporting cyber forensic or security investigations.
• Experience investigating potential data exfiltration, sensitive-data spillages, or misuse of enterprise systems.
• Experience developing or refining security alerting or detection logic based on investigative findings.

Tell us about the monitoring and investigative work you've performed, the environments you've supported, and how you've used security data to identify, investigate, or document potentially suspicious activity.

Why Explorers Stay

• Healthcare coverage and paid time off that give you room to take care of life outside work.
• Teammates who share knowledge, pitch in, and help each other grow.
• Opportunities to deepen your specialty and explore adjacent areas of cybersecurity as new assignments open up.
• Meaningful work protecting systems and information that support a federal mission.

How We Work

• This position works full-time onsite in Ashburn, VA at a government site.
• You'll collaborate with Via Logic teammates, government partners, cybersecurity teams, and investigative stakeholders using tools approved for your work environment.
• Core task coverage is generally weekdays, 8:30 a.m.–5:00 p.m. Eastern Time, with on‑call support requirements based on assignment needs.
• When virtual meetings are part of the work, we expect active participation and use video when appropriate and permitted by the client environment.

About Via Logic

Via Logic LLC is an information technology partner supporting mission‑driven work across DevSecOps, cloud engineering, cybersecurity, data science, and national security analytics for federal and commercial clients. Our teams help modernize complex systems through automation, secure engineering practices, cloud‑native technologies, and scalable infrastructure solutions that support real‑world impact. But beyond the work itself, we care deeply about how we work. We believe great teams are built through collaboration, curiosity, accountability, and trust. Whether you're supporting customer missions, strengthening business operations, or leading expeditions of your own, Via Logic is a place where Explorers are encouraged to grow, contribute, and continuously evolve.

Equal Opportunity Employer

Via Logic LLC is an Equal Opportunity Employer. We are committed to building a diverse and inclusive workplace where all Explorers are valued and supported. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected characteristic under applicable federal, state, or local law. We believe different perspectives strengthen teams, improve innovation, and help us build better solutions for the missions we support.

Accessibility & Accommodations

Via Logic is committed to providing an accessible and inclusive hiring experience for all candidates. Reasonable accommodations are available throughout the application and interview process to support accessibility needs and ensure every candidate has an equitable opportunity to explore a career with our team.

Via Logic may use Greenhouse’s AI-assisted Talent Matching tools to help compare applications against the qualifications and requirements for this role. These tools are intended to support - not replace - human review, and all hiring decisions are made by our recruiting and hiring teams.