Insider Threat Analyst

Title: Insider Threat Analyst

Location: Washington DC/ HYBRID 3 days onsite 2 days remote





About the Role: We are seeking a highly skilled Insider Threat Analyst to support our security

operations by identifying, analyzing, and mitigating risks from potential insider threats. The ideal

candidate will have a strong background in security, intelligence, or investigations and be adept at

developing insider threat programs, monitoring suspicious activity, and gathering threat intelligence

to safeguard our organization s assets.

Role Description:

Develop, implement, and manage insider threat programs, including policies, procedures, and

tools.

Monitor alerts, triage security events, and analyze potential insider threat or risk activities.

Gather, analyze, and assess threat intelligence from internal and external sources to identify

emerging threats and vulnerabilities.

Leverage Microsoft Security Tools (e.g., Sentinel) in both Azure and non-Azure environments to

detect and respond to threats.

Collaborate with security teams, HR, legal, and management to investigate and address insider

threat incidents.

Maintain comprehensive documentation and reporting for investigations and risk assessments.



Required Qualifications & Education:

BS/BA Degree in Cybersecurity or Information Technology from a U.S. accredited college,

university, or institution.

3+ years of experience working in any of the following fields: insider threat; law enforcement;

intelligence (collection, targeting, or analysis); counterintelligence; corporate security; and

investigations.

CISSP, GIAC, CEH, Security +, Network +, or equivalent Certification(s).

Experience developing and implementing an insider threat program, including policies, procedures,

and tools.

Experience monitoring alerts, triaging events, and performing analysis into potential insider

threat/risk activities.

Experience gathering and analyzing threat intelligence from internal and external sources to

identify emerging threats and vulnerabilities.

Experience with Microsoft Security Tools (e.g. Sentinel) that is either part of or independent of the

Microsoft Azure offering.

Additional experience and critical knowledge preferred with the following tools: Qualys,

Crowdstrike, Cloudflare, CyberArk, Solarwinds

Has excellent oral, writing, and team skills.



Clearance and Location Requirements:

Able to be cleared for a Public Trust clearance.