UEBA Engineer: Behavioral Analytics for Cyber Defense

Booz Allen Hamilton; McLean (VA); On-site; USD 69,000 - 158,000; Full time

Benefits offered by this job

Health, life, disability benefits

Tuition assistance

Work-life programs

Dependent care

Job summary

Booz Allen Hamilton in McLean, VA is seeking an Enterprise Cybersecurity UEBA Engineer to strengthen identity, security, and insider risk programs. You will analyze telemetry across users, devices, apps, networks, and cloud to detect deviations and indicators of compromise.

Collaborate with cyber operators, threat analysts, data scientists, and AI engineers to develop and operationalize behavioral analytics, dashboards, and risk scores for real-time situational awareness and semi-autonomous

Qualifications

• 3+ years in cybersecurity analytics, security operations, threat detection, or insider risk.
• 1+ years with a UEBA tool (EverFox, CrowdStrike, or Splunk).
• Experience developing, tuning, and operationalizing behavioral analytics, anomaly detection, or risk scoring.
• Experience using SIEM, UEBA, EDR, identity, or cybersecurity platforms.
• Ability to document analytical methods, investigation findings, detection logic, and recommended actions clearly.
• Ability to work independently and collaboratively in a team environment.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or Data Analytics or 5+ years of experience in cybersecurity, information technology, or analytics in lieu of a degree.

Responsibilities

• Develop, tune, and maintain UEBA detections, behavioral baselines, anomaly detection rules, and risk-based analytics across users, devices, applications, and cloud entities
• Deploy, configure, and maintain UEBA software
• Partner with cyber operators, threat analysts, incident responders, and security stakeholders to define requirements, validate detections, and integrate UEBA analytics into SOC workflows
• Develop dashboards, reports, and risk indicators that communicate behavioral trends, high-risk activity, and investigation findings to technical and executive audiences
• Continuously assess and improve detection logic by evaluating alert quality, reducing false positives, and incorporating analyst feedback and lessons learned from security incidents

Skills

Cybersecurity analytics

Security operations

Threat detection

Threat hunting

Insider risk

UEBA analytics

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or Data Analytics

Tools

EverFox

CrowdStrike

Splunk

Job description

Booz Allen Hamilton in McLean, VA is seeking an Enterprise Cybersecurity UEBA Engineer to strengthen identity, security, and insider risk programs. You will analyze telemetry across users, devices, apps, networks, and cloud to detect deviations and indicators of compromise.

Collaborate with cyber operators, threat analysts, data scientists, and AI engineers to develop and operationalize behavioral analytics, dashboards, and risk scores for real-time situational awareness and semi-autonomous