Onsite Insider Threat Analyst | Threat Detection

Zachary Piper Solutions; Camp Springs, Northern (MD, KY); On-site; USD 117,000 - 143,000; Full time

Benefits offered by this job

PTO

Paid holidays

Medical insurance

Dental insurance

Vision insurance

401K

Tuition reimbursement

Paid Maternity Leave

Military Reserve Pay Offset

Job summary

Zachary Piper Solutions is seeking an Insider Threat Support Analyst for a federal agency in the Washington, DC metro area. This onsite role is located in Camp Springs, MD and supports a cybersecurity program focused on insider threat detection and risk mitigation.

You will monitor alerts in Splunk, DLP, EDR, IAM and user activity tools, investigate potential threats, apply risk scoring, document findings, and develop dashboards.

Qualifications

• Active Top Secret Clearance with SCI eligibility.
• Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk experience, including dashboards and search development.
• Experience with DLP, EDR/NDR, IAM, and user activity monitoring tools such as Teramind.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Skills

Clearance

Analytical skills

Investigative skills

Documentation

Communication

Threat monitoring

Education

Bachelor's degree in a related field

Tools

Splunk

DLP

EDR/NDR

IAM

Teramind

Job description

Zachary Piper Solutions is seeking an Insider Threat Support Analyst for a federal agency in the Washington, DC metro area. This onsite role is located in Camp Springs, MD and supports a cybersecurity program focused on insider threat detection and risk mitigation.

You will monitor alerts in Splunk, DLP, EDR, IAM and user activity tools, investigate potential threats, apply risk scoring, document findings, and develop dashboards.