TS-Cleared Insider Threat Analyst

Socket.dev; Camp Springs (MD); On-site; USD 90,000 - 130,000; Full time

Job summary

Evolver seeks an Insider Threat Support Analyst to operate onsite in Camp Springs, MD. You will focus on identifying and mitigating insider risks from employees, contractors, and partners using telemetry from DLP, SIEM (Splunk), EDR/NDR, and IAM logs.

You will manage a prioritized insider use-case catalog, perform risk scoring, and collaborate with cross-functional teams to refine playbooks, while ensuring privacy and policy alignment. A TS clearance is required for this role.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field, OR 2+ years insider threat experience.
• 2+ years of SPLUNK architecture experience (indexer, forwarder, search heads).
• Active clearance and U.S. citizenship requirements per role.

Responsibilities

• Independently run daily insider risk operations across telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
• Perform end-to-end risk scoring and categorization of user activity; document cases and containment actions.
• Collaborate within a small team to share insights and update insider playbooks and risk thresholds.

Skills

Insider threat

Risk scoring

Investigation

Data analytics

Communication

Education

Bachelor's degree in Computer Science or Information Security

Tools

Splunk

Teramind

DLP

IAM logging

Job description

Evolver seeks an Insider Threat Support Analyst to operate onsite in Camp Springs, MD. You will focus on identifying and mitigating insider risks from employees, contractors, and partners using telemetry from DLP, SIEM (Splunk), EDR/NDR, and IAM logs.

You will manage a prioritized insider use-case catalog, perform risk scoring, and collaborate with cross-functional teams to refine playbooks, while ensuring privacy and policy alignment. A TS clearance is required for this role.