Insider Threat Monitoring Analyst

Leidos

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Ashburn, VA
Salary
$107,900–$195,050 / yr
Employment
Full-time
Posted
106 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $140k
This role $151k
$87k $207k
below market most similar roles pay here above market

This role pays more than 60% of similar roles. Most pay $115,081–$164,687 — the blue band above. At the midpoint, this role pays about $151k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Insider Threat Monitoring Analyst

Role Posting Log in to save

The Insider Threat Monitoring Analyst joins a highly technical digital forensics team supporting the Customs and Border Protection Cyber Security Directorate Security Operations Center. This role involves leading user activity monitoring, foreign service national monitoring, and insider threat analysis to protect enterprise-wide information systems. Key responsibilities include investigating policy violations, data loss prevention events, and sensitive data spillages while supporting various government offices in identifying malicious intent. The analyst will utilize User Activity Monitoring products, Endpoint Detection and Response tools, and perform forensic analysis on network logs and digital media. The position requires expertise in defense-in-depth principles, network security architecture, and NIST 800-88 recommendations. The work focuses on identifying data exfiltration attempts, monitoring OCONUS mobile devices, and providing forensically sound cyber analysis reports for federal investigations.

Skills

Digital Forensics Insider Threat Analysis Data Loss Prevention (DLP) User Activity Monitoring (UAM) Endpoint Detection and Response (EDR) NIST 800-88 CISSP GREM Incident Response Defense-in-Depth Network Topology Information Spillage Forensic Analysis

What you'll do

  • Monitor DLP tools in near real-time to detect potential data exfiltration of mission data or PII.
  • Lead user activity monitoring and analyze network activity for Foreign Service Nationals to identify policy violations.
  • Investigate insider threat alerts, data loss prevention events, and sensitive data spillages.
  • Support federal agencies in investigating personnel operating with potentially malicious or criminal intent.
  • Perform forensic analysis on laptops and mobile devices traveling OCONUS for suspicious activity.
  • Identify all users involved in media leak investigations by tracking document access, copies, and downloads.
  • Provide recommendations for information spillage incident response, including sanitization methods and industry best practices.
  • Generate forensically sound cyber analysis reports detailing investigation procedures, findings, and remediation recommendations.

What we're looking for

  • Must have a BS degree in computer science, IT, or Information/Cyber Security (additional experience or certifications acceptable in lieu of degree).
  • Must have direct relevant experience.
  • Must have an active and current CISSP certification.
  • Must be a US Citizen.
  • Must have a Top Secret clearance and be able to obtain and maintain a CBP BI clearance.
  • Must have working knowledge of defense-in-depth principles, network/HW/SW security architecture, and IT device integrity.
  • Must have demonstrable experience performing forensic analysis, digital media analysis, and in-depth system and network log analysis.
  • Must have experience with User Activity Monitoring products, EDR tools, and ability to generate forensically sound cyber analysis reports.
  • Master’s degree in IT Management, Engineering, or a related field (preferred).
  • SANS GREM certification (preferred).
  • Previous experience leading insider threat or computer forensics investigations in Federal, DOD, or Law Enforcement environments (preferred).

Related searches

More Insider Threat Monitoring Analyst jobs Insider Threat Monitoring Analyst jobs in Ashburn All jobs at Leidos

More like this

Similar roles

Insider Threat Program Hunt Analyst

Leidos

Springfield, VA 6 days ago $87,100–$157,450
UEBA UAM EDR Insider Threat Frameworks Threat Assessment & Mitigation Data Correlation Behavioral Analytics Intelligence Cycle Cybersecurity Toolsets Pathway to Violence Critical Pathway
4+ yrs exp
Save

Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)

Mastercard

O'Fallon, MO 10 days ago $122,000–$207,000
Data Loss Prevention (DLP) User Activity Monitoring (UAM) User Behavior Analytics (UBA) Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP SIEM Incident Response Digital Forensics Threat Hunting OSINT Windows macOS GDPR CISSP GCIH GCIA Security+
Save

Insider Threat / UAM Analyst

Leidos

Alexandria, VA 11 days ago $87,100–$157,450
User Activity Monitoring (UAM) Insider Threat Detection Incident Response Windows Linux Unix MITRE ATT&CK Cyber Kill Chain Intelligence Driven Defense DoD Security Protocols TTPs
4+ yrs exp
Save

Insider Risk Technical Analyst

JLL (Jones Lang LaSalle)

Remote (Chicago, IL) 19 days ago
DLP SIEM UEBA EDR XDR Digital Forensics eDiscovery Security+ CISSP GCFA Microsoft SC-200 Splunk SOC Cyber Risk Management
3+ yrs exp Remote
Save

Senior Insider Threat Investigator

Allstate

Remote (IL) 4 days ago $80,000–$165,000
Digital Forensics SIEM DFIR NIST Cybersecurity Framework ISO 27001 GDPR Risk Analytics Insider Threat Mitigation Penetration Testing Root-Cause Analysis Cybersecurity Investigations Behavioral Monitoring Threat Assessment
3+ yrs exp Remote
Save