Insider Threat Operations Analyst

Evolver Inc; Camp Springs (MD); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Health, dental and vision insurance

401(k) plan

Flexible spending account

Paid time off and parental leave

Job summary

Evolver Inc is seeking a talented Insider Threat Support Analyst to join our Camp Springs, MD team onsite. You will focus on identifying and mitigating risks posed by trusted individuals, leveraging DLP, SIEM (Splunk), EDR/NDR, UAM (Teramind), and IAM logs.

The role emphasizes proactive risk scoring, evidence-based containment actions, and cross-functional collaboration to refine playbooks while aligning with policy and civil liberties requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, OR 2+ years of insider threat detection experience.
• Active Security+ or ISC2 CISSP (or approved equivalent) required.
• 2+ years of SPLUNK architecture experience (indexer, forwarder, search heads).
• U.S. Citizen with Top Secret Clearance and SCI eligibility (ICD 704) without waivers.

Responsibilities

• Independently run daily insider-threat operations across multiple telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
• Conduct end-to-end risk scoring and document notable cases with evidence and containment actions.
• Collaborate with cross-functional teams to refine playbooks and adjust risk thresholds.
• Lead weekly coordination with Applied Intelligence and platform owners to update detection logic.
• Prepare Monthly InT Summaries with metrics and trends.
• Utilize SPLUNK and Teramind to optimize data analysis and incident reporting.

Skills

Insider threat analysis

Risk scoring

Self-motivated

Analytical thinking

Cross-functional collaboration

Education

Bachelor's degree in Computer Science / Information Security or related field

Tools

SPLUNK

UI/GUI development

Teramind (UAM)

DLP

EDR/NDR

IAM logging

Job description

Evolver Inc is seeking a talented Insider Threat Support Analyst to join our Camp Springs, MD team onsite. You will focus on identifying and mitigating risks posed by trusted individuals, leveraging DLP, SIEM (Splunk), EDR/NDR, UAM (Teramind), and IAM logs.

The role emphasizes proactive risk scoring, evidence-based containment actions, and cross-functional collaboration to refine playbooks while aligning with policy and civil liberties requirements.