Insider Threat Analyst

Job Description

Job Title: Insider Threat Analyst. Location: Arlington, Virginia, USA / Broomfield, Colorado, USA / Brooklyn Park, Minnesota, USA / Albuquerque, New Mexico, USA / Remote (USA)

Job Type: Full-time (Remote)

Responsibilities:

• Review, triage, and prioritize security alerts from DTEX, Microsoft Purview, and other monitoring platforms
• Develop and optimize insider threat detection across UEBA, DLP, SIEM, and endpoint monitoring platforms
• Monitor and analyze user activity to identify data exfiltration, fraud, sabotage, and policy violations
• Use Microsoft Purview for data loss prevention, information protection, and insider risk management
• Monitor privileged account activity and identity analytics using Microsoft Entra ID;
• Perform proactive threat hunting to identify previously undetected insider risks
• Analyze technical indicators alongside HR events, travel data, and organizational changes to assess insider risk
• Conduct investigations from initial alert through remediation
• Coordinate investigations with Legal, HR, and law enforcement when required
• Prepare investigation reports and brief leadership on findings;
• Develop and maintain insider threat playbooks, response procedures, KPIs, and dashboards
• Deliver insider threat awareness training for employees, managers, and security teams
• Stay current with emerging insider threat techniques, technologies, and best practices

Qualifications:

• High School Diploma or GED
• Minimum 5 years of experience in insider threat analysis or a related cybersecurity field
• Minimum 5 years of experience with DTEX or similar insider threat monitoring platforms
• Must be a U.S. Person (U.S. citizen, permanent resident, green card holder, asylee, or refugee);
• Candidates must not be nationals of the People's Republic of China or Russia unless they are also U.S. citizens due to national security requirements

Preferred:

• Bachelor's degree in Cybersecurity, Computer Science, Criminal Justice, or a related field
• Experience investigating data theft, fraud, or policy violations
• Hands-on experience with Microsoft Purview and Microsoft Entra ID
• Experience with UEBA platforms, DLP solutions, SIEM platforms, and log analysis tools
• Knowledge of query languages such as Splunk SPL, KQL, or SQL
• Experience creating security procedures, playbooks, and technical documentation
• Strong written and verbal communication skills with the ability to explain technical findings to non-technical audiences
• Background in counterintelligence, technology protection, or intellectual property security
• Experience identifying threats from foreign intelligence services or other adversaries
• Experience developing and improving insider threat programs
• Familiarity with behavioral psychology, social engineering, and human-centered security approaches

Benefits And Compensation:

• Annual salary of $84,000 to $105,000
• Flexible work schedule with remote work opportunities, subject to approval
• Employer-subsidized health, dental, and vision insurance;
• 401(k) retirement plan with student loan repayment matching benefit
• Equity program
• 12 paid holidays plus generous vacation and sick leave
• Paid parental leave
• Employee discounts

Other Information:

• Applications are accepted on an ongoing basis with no application deadline
• AI tools may assist during parts of the hiring process, but all hiring decisions are made by people
• Equal opportunity employer committed to diversity and inclusion