Insider Threat & UAM Analyst: Incident Response Pro

Leidos; Alexandria (VA); On-site; USD 104,000 - 141,000; Full time

Job summary

Leidos in Alexandria, VA is seeking an Insider Threat/UAM Analyst to join the DISA J-6 UAM Team at the Mark Center. This role will triage and analyze alerts, document findings, and support countermeasures and reporting to leadership.

The candidate will need a TS/SCI clearance, a bachelor’s degree with 4+ years of experience, plus expertise in incident response and insider threat detection. Collaboration with government and contractor teams is essential to strengthen the UAM program.

Qualifications

• Active Top Secret/SCI clearance required.
• Bachelor's degree and 4+ years of professional experience; additional related years acceptable in lieu of a degree.
• At least 1 year of incident response experience.
• At least 1 year of UAM or insider threat detection experience.
• Demonstrated knowledge of UAM capabilities and common insider threat TTPs.
• Knowledge of network traffic and communications.
• Experience coordinating with external organizations, especially Law Enforcement and Counter Intelligence.
• Knowledge of incident handling procedures.

Responsibilities

• Triage and analyze UAM alerts.
• Document and report findings to impacted organizations.
• Provide information to the UAM lead for customer trending and reporting.
• Create and implement countermeasures to weaknesses against known TTPs.
• Support meetings where UAM representation is needed.
• Provide recommendations to leadership on ways to improve the UAM program.

Skills

Active Top Secret/SCI

Incident response

UAM/insider threat detection

UAM capabilities knowledge

Network traffic knowledge

External coordination

Incident handling

Written and verbal communication

Education

Bachelor's degree

Job description

Leidos in Alexandria, VA is seeking an Insider Threat/UAM Analyst to join the DISA J-6 UAM Team at the Mark Center. This role will triage and analyze alerts, document findings, and support countermeasures and reporting to leadership.

The candidate will need a TS/SCI clearance, a bachelor’s degree with 4+ years of experience, plus expertise in incident response and insider threat detection. Collaboration with government and contractor teams is essential to strengthen the UAM program.