Onsite Insider Threat Monitoring Analyst (Ashburn, VA)

Via Logic Llc; Sterling (VA); On-site; USD 106,000 - 126,000; Full time

Benefits offered by this job

Healthcare coverage

Paid time off

Growth opportunities

Job summary

Via Logic LLC is seeking a Mid-Level Insider Threat Monitoring Analyst to support CBP cybersecurity operations on a government site in Ashburn, VA. The role focuses on analyzing user behavior, security events, and alerts to identify insider threat indicators and potential data loss while coordinating with government staff.

Responsibilities include monitoring DLP and UAM tools, investigating alerts, documenting findings, and assisting in incident notifications and case analyses.

Qualifications

• 3+ years of relevant professional experience in cybersecurity operations, insider threat monitoring, security investigations, incident detection and response, cyber forensics, or a related area.

Responsibilities

• Support insider threat monitoring activities by analyzing user behavior, access patterns, security events, and other relevant activity for potential insider threat indicators.
• Monitor Data Loss Prevention (DLP) solutions and other applicable security tools to support insider threat and security operations investigations.
• Investigate DLP alerts involving potential data exfiltration of CBP mission data or sensitive employee information.
• Support User Activity Monitoring (UAM) activities and investigative tasks as directed by government staff.
• Monitor network activity for potential misuse and security policy violations.
• Analyze alerts and investigative information to identify suspicious or anomalous activity and support appropriate investigative action.
• Support investigations involving potential malicious activity, alleged criminal activity, or unauthorized disclosure of information.
• Support sensitive-data spillage response by helping assess incidents and recommending appropriate handling and sanitization methods in accordance with applicable guidance and procedures.
• Monitor government laptops and mobile devices associated with foreign travel for suspicious activity and policy violations.
• Recommend improvements to insider threat alert triggers and detections across security tools and logging sources.
• Document investigative activity and contribute to incident notifications, case analysis, reports, and other required work products.

Skills

Cybersecurity operations

Insider threat monitoring

Security investigations

Incident detection

Data forensics

Documentation

Collaboration

Tools

DLP

UAM

Job description

Via Logic LLC is seeking a Mid-Level Insider Threat Monitoring Analyst to support CBP cybersecurity operations on a government site in Ashburn, VA. The role focuses on analyzing user behavior, security events, and alerts to identify insider threat indicators and potential data loss while coordinating with government staff.

Responsibilities include monitoring DLP and UAM tools, investigating alerts, documenting findings, and assisting in incident notifications and case analyses.