UEBA Engineer – Real-Time Behavioral Analytics

Booz Allen Hamilton; North Dakota; On-site; USD 69,000 - 158,000; Full time

Job summary

Booz Allen Hamilton is seeking an Enterprise Cybersecurity UEBA Engineer to strengthen our identity, security, and insider risk programs by building behavior analytics and risk indicators. You will analyze telemetry across users, devices, applications, networks, and cloud to identify deviations and indicators of compromise.

Collaboration with operators, threat analysts, data scientists, and AI engineers will be essential to develop real-time analytics and SOC-ready workflows. U.S.

Qualifications

• 3+ years of experience in cybersecurity analytics, security operations, threat detection, threat hunting, insider risk, or UEBA.
• 1+ years of experience with a UEBA tool, including EverFox, CrowdStrike, or Splunk
• Experience developing, tuning, and operationalizing behavioral analytics, anomaly detection rules, risk scores, or correlation logic
• Experience using SIEM, UEBA, EDR, identity, or cybersecurity platforms
• Ability to document analytical methods, investigation findings, detection logic, and recommended actions clearly and accurately
• Ability to work independently and collaboratively in a team environment
• Ability to be self-motivated, pay close attention to detail, and manage multiple priorities
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or Data Analytics or 5+ years of experience in cybersecurity, information technology, or analytics in lieu of a degree

Responsibilities

• Develop, tune, and maintain UEBA detections, behavioral baselines, anomaly detection rules, and risk-based analytics across users, devices, applications, and cloud entities
• Deploy, configure, and maintain UEBA software
• Partner with cyber operators, threat analysts, incident responders, and security stakeholders to define requirements, validate detections, and integrate UEBA analytics into SOC workflows
• Develop dashboards, reports, and risk indicators that communicate behavioral trends, high-risk activity, and investigation findings to technical and executive audiences
• Continuously assess and improve detection logic by evaluating alert quality, reducing false positives, and incorporating analyst feedback and lessons learned from security incidents

Skills

Cybersecurity analytics

Threat detection

UEBA experience

SIEM/EDR usage

Documentation

Independent work

Self-motivation

Education

Bachelor’s degree in Cybersecurity/IT/CS/Data Analytics

5+ years of related experience in lieu of degree

Tools

EverFox

CrowdStrike

Splunk

Job description

Booz Allen Hamilton is seeking an Enterprise Cybersecurity UEBA Engineer to strengthen our identity, security, and insider risk programs by building behavior analytics and risk indicators. You will analyze telemetry across users, devices, applications, networks, and cloud to identify deviations and indicators of compromise.

Collaboration with operators, threat analysts, data scientists, and AI engineers will be essential to develop real-time analytics and SOC-ready workflows. U.S.