Onsite Insider Threat Analyst – Clearance Eligible

Piper Companies; Camp Springs (MD); Presencial; USD 122.000 - 149.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Full Benefits Package

Descripción de la vacante

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in the Washington DC metro area. This onsite role is based in Camp Springs, MD and focuses on insider threat detection and risk mitigation within a cybersecurity program.

The Analyst will monitor alerts, investigate potential data exfiltration, and contribute to risk scoring, reporting, and collaboration with cybersecurity, incident response, and intelligence teams.

Formación

• Active Secret, TS, or TS/SCI Clearance required.
• 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk or other UAM monitoring tools experience.

Responsabilidades

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Conocimientos

Analytical skills

Investigative skills

Documentation skills

Communication skills

Educación

Bachelor's degree preferred

Herramientas

Splunk

EDR/NDR

IAM

Descripción del empleo

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in the Washington DC metro area. This onsite role is based in Camp Springs, MD and focuses on insider threat detection and risk mitigation within a cybersecurity program.

The Analyst will monitor alerts, investigate potential data exfiltration, and contribute to risk scoring, reporting, and collaboration with cybersecurity, incident response, and intelligence teams.