Insider Threat Hunt Analyst

Leidos, Inc.
Springfield, VA, United States
2 days ago
Apply on find.jobs
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Compensation
$140,000 - $180,000
Working hours
Regular working hours
Job source

Tech stack

Data Analysis Cyber Security Digital Forensics Python (Programming Language) Network Forensics Security Information and Event Management Scripting Cloud Platform System Cyber Threat Analysis Splunk

Job description

Leidos seeks an Insider Threat Program Hunt Team Analyst to detect, analyze, and mitigate insider risks across complex government and commercial environments. In this role, you will perform advanced behavioral and network analytics, threat hunting, and case investigations using SIEM, UEBA, and endpoint tools. You will develop detection logic, create hunt playbooks, and collaborate with cyber, HR, and legal teams. Leidos offers mission-focused work, growth opportunities, and a collaborative culture centered on integrity, innovation, and protecting critical infrastructure., * Conduct proactive insider threat hunting across endpoints, networks, and cloud environments

  • Analyze behavioral, access, and security telemetry to identify anomalous insider activity
  • Develop and tune detection rules, analytics, and hunt playbooks for insider threat use cases
  • Investigate alerts, document findings, and recommend containment or mitigation actions
  • Collaborate with SOC, HR, legal, and program stakeholders on sensitive investigations
  • Produce reports, dashboards, and briefings for technical and executive audiences
  • Support insider threat program policies, procedures, and continuous improvement
  • Leverage scripting and automation to streamline data analysis and threat hunting workflows
  • Incorporate threat intelligence and TTPs into insider threat detection strategies
  • Mentor junior analysts and contribute to knowledge sharing within the hunt team

Requirements

  • Insider threat analysis
  • Cyber threat hunting
  • SIEM tools (Splunk/Elastic)
  • UEBA platforms
  • Network traffic analysis
  • Endpoint security tools (EDR)
  • Digital forensics and incident response
  • Scripting/automation (Python, Power
  • Shell)
  • Security operations (SOC)
  • Threat intelligence analysis

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on find.jobs
Prepare application

Good distractions

Loading talks and stories from around this role…