Insider Threat Operations Analyst

evolverinc; Camp Springs (MD); On-site; USD 120,000 - 165,000; Full time

Job summary

Evolver is seeking a talented Insider Threat Support Analyst to join our Camp Springs, MD team onsite. You will focus on identifying, assessing, and mitigating risks posed by trusted individuals using telemetry from DLP, SIEM, EDR/NDR, and IAM logs.

The role requires a strong cybersecurity background, active TS clearance, and SPLUNK/UI-GUI development experience. You will work in a lean, agile unit to refine detection strategies and support incident reporting.

Qualifications

• Active certification: Security+ or CISSP (or equivalent)
• US citizenship with Top Secret clearance
• 2+ years with SPLUNK architecture, UI/GUI development, and operations
• Familiarity with DLP, EDR/NDR, and IAM logging

Responsibilities

• Independently run daily insider risk operations across telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
• Conduct end-to-end risk scoring and classification of user activity; document cases and recommend containment.
• Collaborate within a small team to share insights and update internal briefs.
• Maintain and refine a prioritized insider use-case catalog; coordinate to adjust playbooks and risk thresholds.
• Author Monthly InT Summaries focusing on metrics and risk patterns.
• Utilize SPLUNK architecture and UAM tools to optimize data analysis and incident reporting.

Skills

SPLUNK

Security+ / CISSP

Insider threat detection

DLP / EDR / IAM logging

Education

Bachelor's degree in CS / InfoSec or related field

2+ years insider threat / risk experience

Tools

SPLUNK

Teramind

IAM logging

Job description

Evolver is seeking a talented Insider Threat Support Analyst to join our Camp Springs, MD team onsite. You will focus on identifying, assessing, and mitigating risks posed by trusted individuals using telemetry from DLP, SIEM, EDR/NDR, and IAM logs.

The role requires a strong cybersecurity background, active TS clearance, and SPLUNK/UI-GUI development experience. You will work in a lean, agile unit to refine detection strategies and support incident reporting.