Insider Threat Analyst

Job Description

Job Title: Insider Threat Analyst. Location: Arlington, VA / Broomfield, CO / Brooklyn Park, MN / Albuquerque, NM, USA

You will work closely with Legal, HR, IT, and business units to minimize internal risk while maintaining employee trust; Strong technical skills, investigative expertise, and excellent communication abilities are required.

Responsibilities:

Detection, Alerting & Analysis:

• Review, triage, and prioritize alerts from DTEX, Microsoft Purview, and other monitoring platforms
• Develop, tune, and optimize insider threat detection use cases across UEBA, DLP, SIEM, and endpoint monitoring platforms
• Monitor DTEX telemetry to identify high-risk user behaviors and potential data exfiltration;
• Leverage Microsoft Purview for data loss prevention, information protection, and insider risk management
• Utilize Microsoft Entra ID for identity analytics, access reviews, and monitoring privileged account activity
• Conduct behavioral analysis to detect anomalous patterns such as data exfiltration, fraud, or policy violations
• Perform proactive threat hunting to uncover previously undetected insider risks
• Analyze technical indicators with contextual information (HR events, travel data, organizational changes) for comprehensive risk assessment

Investigations:

• Conduct investigations of insider threat incidents from initial triage to remediation
• Coordinate with Legal, HR, and external authorities during sensitive investigations
• Prepare detailed investigation reports and briefings for leadership

Program Development:

• Create and maintain insider threat playbooks and response procedures
• Contribute to the strategy and maturity roadmap of the insider threat program
• Develop and maintain insider threat metrics, KPIs, and dashboards;
• Deliver insider threat awareness training for employees, managers, and security teams
• Stay updated on emerging insider threat trends and technologies and recommend enhancements

Qualifications:

• Bachelor’s degree minimum
• Minimum 5+ years of experience in insider threat analysis or related cybersecurity discipline
• Minimum 5+ years’ experience with DTEX or similar insider threat monitoring platforms
• Must meet U.S. Government contractual requirements (U.S. Person, no nationals from PRC or Russia unless also a U.S. citizen)

Preferred:

• Bachelor’s degree in Cybersecurity, Computer Science, Criminal Justice, or related field
• Experience with Microsoft Purview (Insider Risk Management, DLP, Information Protection) and Microsoft Entra ID
• Familiarity with UEBA platforms (e.g., Securonix, Exabeam, Microsoft Sentinel) and DLP solutions
• Proficiency with SIEM platforms, log analysis, and query languages (Splunk SPL, KQL, SQL)
• Background in investigations related to data theft, fraud, or policy violations;
• Counterintelligence experience and understanding of technology protection, trade secrets, and economic espionage
• Ability to draft security procedures, playbooks, and technical documentation
• Knowledge of behavioral psychology, social engineering tactics, and human-centered security

Benefits & Compensation:

• Annual salary range: $89,000 – $112,000 (based on skills and experience)
• Flexible work schedule;
• Employer-subsidized health, dental, and vision insurance
• 401(k) retirement savings plan with matching and student loan repayment benefit
• Equity opportunities
• 12 paid holidays plus generous vacation and sick time
• Paid parental leave
• Employee discounts