Onsite Insider Threat Investigator

Zachary Piper Solutions; Camp Springs (MD); On-site; USD 117,000 - 143,000; Full time

Benefits offered by this job

Salary up to $130,000

Full Benefits Package

Job summary

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in Camp Springs, MD, near the Washington DC metro area, focusing on insider threat detection and risk mitigation within a cybersecurity program.

The Analyst will monitor and triage alerts from Splunk, DLP, EDR and IAM, investigate suspicious user activity, apply risk scoring, document findings, and develop dashboards while collaborating with cybersecurity, incident response and intelligence teams.

Qualifications

• Bachelor's degree in related field or 2+ years insider threat or user activity monitoring experience.
• 2+ years hands-on Splunk experience, including dashboards and search development.
• Experience with DLP, EDR/NDR, IAM and user activity monitoring tools such as Teramind.
• Active Top Secret Clearance with SCI eligibility or equivalent cybersecurity clearance.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Skills

Analytical skills

Investigative skills

Documentation

Communication

Education

Bachelor's degree in related field

2+ years insider threat experience

Tools

Splunk

DLP

EDR/NDR

IAM

Teramind

Job description

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency in Camp Springs, MD, near the Washington DC metro area, focusing on insider threat detection and risk mitigation within a cybersecurity program.

The Analyst will monitor and triage alerts from Splunk, DLP, EDR and IAM, investigate suspicious user activity, apply risk scoring, document findings, and develop dashboards while collaborating with cybersecurity, incident response and intelligence teams.