Insider Threat / UAM Analyst

Leidos

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Alexandria, VA
Salary
$87,100–$157,450 / yr
Employment
Full-time
Posted
11 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $144k
This role $122k
$76k $187k
below market most similar roles pay here above market

This role pays less than 65% of similar roles. Most pay $116,871–$170,375 — the blue band above. At the midpoint, this role pays about $122k versus about $144k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 426 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 344 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Insider Threat / UAM Analyst

The Insider Threat / UAM Analyst joins the DISA J-6 User Activity Monitoring team to triage, analyze, and assess security alerts. This role involves documenting findings within a case management system, sharing information with impacted parties, and providing data for customer trending and reporting. The analyst will create and implement countermeasures against specific weaknesses related to known insider threat tactics, techniques, and procedures. Key responsibilities include supporting meetings and providing program improvement recommendations. Required skills include incident response, UAM or insider threat detection experience, and knowledge of network traffic, communications, and incident handling procedures. Candidates should understand the Cyber Kill Chain methodology, MITRE ATT&CK framework, and computer security principles. Technical proficiency with Windows, Linux, or Unix operating systems and DoD security protocols is also required.

What you'll do

  • Triage and analyze User Activity Monitoring (UAM) alerts.
  • Document and report findings to impacted organizations through a case management system.
  • Provide data to the UAM Lead for customer trending and reporting requirements.
  • Create and implement countermeasures against specific weaknesses and known adversarial TTPs.
  • Support meetings where UAM representation is required.
  • Provide recommendations to contractor and government leadership to improve the UAM program.

What we're looking for

  • Must have active Top Secret/SCI.
  • Bachelor's degree and 4+ years of professional experience; additional related years of experience is accepted in lieu of a degree.
  • At least 1 year of incident response experience.
  • At least 1 year of UAM or insider threat detection experience.
  • Demonstrated experience with UAM capabilities and common insider threat TTPs.
  • Demonstrated knowledge of network traffic and communications, including known ports and services.
  • Demonstrated experience in coordinating with external organizations, especially Law Enforcement and Counter Intelligence.
  • Knowledge of incident handling procedures.

More like this

Similar roles

Insider Threat Program Hunt Analyst

Leidos

Springfield, VA 6 days ago $87,100–$157,450
UEBA UAM EDR Insider Threat Frameworks Threat Assessment & Mitigation Data Correlation Behavioral Analytics Intelligence Cycle Cybersecurity Toolsets Pathway to Violence Critical Pathway
4+ yrs exp

Insider Threat Program Engineering Manager

Leidos

Springfield, VA 20 days ago $154,050–$278,475
User Activity Monitoring Oracle Database Cisco Juniper Information Assurance Security Accreditation ATO Data Correlation Capacity Management
10+ yrs exp

Insider Threat Monitoring Analyst

Leidos

Ashburn, VA 106 days ago $107,900–$195,050
Digital Forensics Insider Threat Analysis Data Loss Prevention (DLP) User Activity Monitoring (UAM) Endpoint Detection and Response (EDR) NIST 800-88 CISSP GREM Incident Response Defense-in-Depth Network Topology Information Spillage Forensic Analysis
8+ yrs exp

Lead Security Monitoring and Response Analyst (Insider Threat Program Lead)

Mastercard

O'Fallon, MO 10 days ago $122,000–$207,000
Data Loss Prevention (DLP) User Activity Monitoring (UAM) User Behavior Analytics (UBA) Microsoft Purview Microsoft Defender Microsoft Sentinel Endpoint DLP SIEM Incident Response Digital Forensics Threat Hunting OSINT Windows macOS GDPR CISSP GCIH GCIA Security+

SOC Analyst

Leidos

Alexandria, VA 27 days ago $107,900–$195,050
Incident Response SIEM Splunk ArcSight QRadar LogLogic IDS/IPS Netflow Full Packet Capture Network Forensics Unix Linux TCP/IP MITRE ATT&CK Cyber Kill Chain Malware Analysis CompTIA Security+ CySA+ CEH GCIA
8+ yrs exp