Insider Threat Analyst

Agile Defense

Insider Threat Analyst managing insider threat detection and analysis initiatives for Agile Defense. Utilizing technical skills to monitor, investigate, and document insider threats while adhering to federal guidelines.

Posted 7/18/2026full-timeWashington, D.C. • Washington • 🇺🇸 United StatesMid-LevelSenior💰 $110,000 - $135,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in insider threat detection and analysis, with strong capabilities in log analysis, event correlation, and the use of enterprise tools. Maintains compliance with legal and ethical standards while effectively communicating findings and collaborating with stakeholders.

Highest-signal resume keywords

Insider Threat AnalysisLog AnalysisSIEM ToolsCybersecurity ExperienceSecurity Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Log AnalysisEvent CorrelationInsider Threat DetectionDigital Forensics ConceptsInvestigative TechniquesWindows EnvironmentsUnix EnvironmentsLinux EnvironmentsFalse Positive DifferentiationData Correlation

Soft Skills

Strong Written CommunicationCollaboration

Tools & Technologies

SplunkDTEXProofpointObserveITMicrosoft PurviewExabeam

Certifications & Qualifications

Counter-Insider Threat Fundamentals Certification

Industry Keywords

Insider Threat ProgramPrivacy and Civil LibertiesSecurity OperationsCybersecurityDLPUEBAUAM

Tech Stack

Tools & technologies

Cyber SecurityLinuxSplunkUnix

About the role

Key responsibilities & impact

Monitor and analyze logs and alerts from multiple applications via dashboards and other means to determine whether activity represents an actual insider threat incident or a false positive.
Triage and investigate potential insider threat indicators, escalating confirmed or ambiguous incidents to the Senior Insider Threat Analyst as appropriate.
Support the configuration, tuning, and troubleshooting of application triggers used for insider threat detection in an enterprise environment.
Assist with the deployment, operation, and maintenance of enterprise tools supporting insider threat detection.
Document findings, produce clear analytical write-ups, and maintain case records in accordance with established reporting procedures.
Correlate data across multiple sources to build a complete picture of potential insider threat activity.
Support the development and refinement of workflows, playbooks, and program documentation.
Conduct all activities in a manner that protects employee privacy and civil liberties and meets the legal requirements of an insider threat program.
Coordinate with SOC, investigative, and other stakeholders as directed to support program objectives.

Requirements

What you’ll need

U.S. citizenship and ability to receive and maintain a security clearance at the Tier 5 level or higher.
BS or BA degree, or additional related experience in lieu of a degree.
Approximately 6 years of combined experience across cybersecurity, security operations, investigations, or insider threat analysis.
Hands-on experience with one or more enterprise insider threat, DLP, SIEM, or UEBA/UAM tools (e.g., Splunk, DTEX, Proofpoint/ObserveIT, Microsoft Purview, Exabeam, or similar).
Demonstrated ability to analyze logs and dashboards to differentiate real incidents from false positives.
Working knowledge of Windows, Unix, and Linux environments and common insider threat indicators and behaviors.
Familiarity with log analysis, event correlation, and basic investigative techniques, including awareness of digital forensics concepts.
Understanding of the legal and ethical requirements of an insider threat program as they relate to privacy and civil liberties.
Strong written communication for documenting findings, and the ability to work under the direction of senior analysts within an established program.
Ability to obtain the Counter-Insider Threat Fundamentals Certification if required.

Benefits

Comp & perks

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities