Insider Threat Program Hunt Analyst

Leidos

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Springfield, VA
Salary
$87,100–$157,450 / yr
Employment
Full-time
Posted
6 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $140k
This role $122k
$76k $189k
below market most similar roles pay here above market

This role pays less than 68% of similar roles. Most pay $117,127–$162,500 — the blue band above. At the midpoint, this role pays about $122k versus about $140k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 435 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 351 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Insider Threat Program Hunt Analyst

The Insider Threat Program Hunt Analyst joins the Digital Sector to support the Department of Homeland Security Insider Threat Program. This role involves sustaining and evolving the database backbone of the program to identify and eliminate potential threat actors. The analyst will examine insider threat data to identify trends, provide analytical support for User Activity Monitoring and User and Entity Behavior Analytics tools, and conduct proactive hunting across the enterprise network. Key responsibilities include monitoring platforms for emerging requirements, researching concerning behaviors, and identifying mitigation strategies. The position requires proficiency with UAM platforms, EDR tools, network traffic analysis, and open-source toolsets. The work focuses on utilizing behavioral analytics and insider threat frameworks to detect anomalous activity and policy violations that could compromise the national security mission.

What you'll do

  • Examine and analyze insider threat data to identify trends, patterns, and potential threat indicators.
  • Provide analytical support for the operation of User Activity Monitoring (UAM) and UEBA tools.
  • Conduct proactive insider threat hunting across the enterprise network using behavioral analytics.
  • Perform continuous hunt operations across data logs, EDR tools, and network traffic.
  • Identify mitigation strategies to help the investigative team reduce insider threat risks.
  • Baseline user activity using UEBA platforms to detect deviations from normal behavior.
  • Respond to critical and high UAM alerts within four hours during normal business hours.

What we're looking for

  • Must be a U.S. Citizen.
  • Must possess a current TS/SCI clearance.
  • Must be able to obtain DHS EOD SCI and undergo a CI Polygraph.
  • Bachelor's degree and 4-8 years of relevant insider threat experience.
  • Minimum of 4 years of knowledge in the intelligence cycle, analytic techniques, systems, and processes.
  • Minimum of 4 years of knowledge in Threat Assessment & Mitigation Strategies.
  • Working knowledge of User Activity Monitoring (UAM) software, cybersecurity toolsets, and open-source toolsets.
  • Working knowledge of Insider Threat Frameworks, including Pathway to Violence and Critical Pathway.
  • Master’s degree in Criminal Justice, Homeland Security, Cyber Security, or a related field (preferred).
  • 4+ years of experience in Intelligence Analysis (preferred).
  • 4+ years of experience in Threat Assessment & Mitigation (preferred).
  • Certified Counter-Insider Threat Professional - Fundamentals or Analysis (preferred).
  • Completion of specific CDSE courses including ITDAC and INT311.CU/INT312.CU/CI201.CU (preferred).

More like this

Similar roles

Insider Threat / UAM Analyst

Leidos

Alexandria, VA 11 days ago $87,100–$157,450
User Activity Monitoring (UAM) Insider Threat Detection Incident Response Windows Linux Unix MITRE ATT&CK Cyber Kill Chain Intelligence Driven Defense DoD Security Protocols TTPs
4+ yrs exp

Insider Threat Monitoring Analyst

Leidos

Ashburn, VA 106 days ago $107,900–$195,050
Digital Forensics Insider Threat Analysis Data Loss Prevention (DLP) User Activity Monitoring (UAM) Endpoint Detection and Response (EDR) NIST 800-88 CISSP GREM Incident Response Defense-in-Depth Network Topology Information Spillage Forensic Analysis
8+ yrs exp

Cyber Intel Analyst

Leidos

Washington, DC 42 days ago $87,100–$157,450
Threat Hunting Threat Intelligence Cyber Fusion MITRE ATT&CK SIEM EDR Python PowerShell Bash AWS Azure O365 Splunk KQL Elastic DSL DFIR Anomali ThreatConnect MISP TCP/IP DNS HTTP/S IDS/IPS Next-Gen Firewalls
4+ yrs exp Hybrid

Insider Threat Program Engineering Manager

Leidos

Springfield, VA 20 days ago $154,050–$278,475
User Activity Monitoring Oracle Database Cisco Juniper Information Assurance Security Accreditation ATO Data Correlation Capacity Management
10+ yrs exp

Senior Insider Threat Investigator

Allstate

Remote (IL) 4 days ago $80,000–$165,000
Digital Forensics SIEM DFIR NIST Cybersecurity Framework ISO 27001 GDPR Risk Analytics Insider Threat Mitigation Penetration Testing Root-Cause Analysis Cybersecurity Investigations Behavioral Monitoring Threat Assessment
3+ yrs exp Remote

Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)

Mastercard

O'Fallon, MO 10 days ago $122,000–$207,000
Data Loss Prevention (DLP) User Activity Monitoring (UAM) User Behavior Analytics (UBA) Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP SIEM Incident Response Digital Forensics Threat Hunting OSINT Windows macOS GDPR CISSP GCIH GCIA Security+