Insider Threat Support Analyst

Zachary Piper Solutions; Camp Springs, Northern (MD, KY); On-site; USD 117,000 - 143,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Paid Maternity Leave

Military Reserve Pay Offset

Job summary

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in the Washington, DC metro area. The role is onsite in Camp Springs, MD, focusing on insider threat detection, risk mitigation, and collaboration with cybersecurity and intelligence teams.

Responsibilities include monitoring alerts across Splunk, DLP, and EDR tools, investigating potential exfiltration, and developing dashboards to improve monitoring capabilities.

Qualifications

• Active TS clearance with SCI eligibility required.
• Security+ or CISSP or equivalent cybersecurity certification.
• Bachelor's degree in a related field or 2+ years insider threat or user activity monitoring experience.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Skills

Top Secret clearance

Security+ / CISSP

Analytical skills

Investigation skills

Communication skills

Documentation skills

Education

Bachelor’s degree or 2+ years insider threat experience

Tools

Splunk

Teramind

DLP

EDR/NDR

IAM

Job description

Insider Threat Support Analyst

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency supporting immigration and homeland security operations. This position is onsite in Camp Springs, MD (Washington, DC metro area) supporting a cybersecurity program focused on insider threat detection and risk mitigation.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Qualifications

• Active Top Secret Clearance with SCI eligibility.
• Active Security+, CISSP, or equivalent cybersecurity certification.
• Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk experience, including dashboards and search development.
• Experience with DLP, EDR/NDR, IAM, and user activity monitoring tools such as Teramind.
• Strong analytical, investigative, documentation, and communication skills.

Compensation

• Salary: Up to $130,000
• PTO
• Paid Holidays
• Medical
• Dental
• Vision
• 401K
• Tuition Reimbursement
• Paid Maternity Leave
• Military Reserve Pay Offset