Insider Threat Analyst Lead
About The Position
Gunnison Consulting Group is seeking an Insider Threat Analyst Lead to lead the development, implementation, and maturation of the Insider Threat Program (InTP) in alignment with federal standards. This role involves establishing program governance, developing Standard Operating Procedures (SOPs), and partnering with HR, Legal, and cybersecurity teams. The lead will oversee insider threat awareness programs, design detection use cases, and analyze risks and incidents. They will also conduct program assessments, recommend enhancements, and develop program deliverables. The position requires producing executive-level briefings and reports, leading technical briefings and stakeholder meetings, and tracking action items to ensure timely resolution. Continuous improvement through performance metrics and feedback loops is also a key aspect of this role.
Requirements
- 5 years conducting in-depth technical analysis of insider threat
- 3 years conducting behavioral analytics
- 2 years using Splunk SIEM to correlate cybersecurity alerts
- 2 years managing overall case management for cybersecurity investigations
- Certified Counter-Insider Threat Professional (CCITP) certification required
- Ability to obtain and maintain a Public Trust clearance
Responsibilities
- Lead the development, implementation, and maturation of the Insider Threat Program (InTP) in alignment with federal standards (e.g., NITTF Minimum Standards).
- Establish and maintain program governance, including authorities, escalation paths, communication cadence, and operational workflows.
- Develop, coordinate, and maintain Insider Threat Standard Operating Procedures (SOPs) and work instructions.
- Partner closely with Human Resources, Legal, and cross-functional cybersecurity teams to ensure compliance with organizational, legal, and policy requirements.
- Oversee the creation and delivery of insider threat awareness programs and training materials across the enterprise.
- Design and refine insider threat detection use cases and behavioral indicators to enhance monitoring and risk identification.
- Collaborate with detection engineering and SOC teams to integrate insider threat use cases into enterprise alerting and monitoring capabilities.
- Analyze insider threat risks, trends, and incidents to inform program improvements and enterprise risk posture.
- Conduct periodic program assessments and audits to evaluate effectiveness and identify gaps in controls, processes, and tooling.
- Recommend enhancements to governance, tools, and processes to address evolving insider threat risks and organizational changes.
- Develop program deliverables including Insider Threat Program Plans, KPI summaries, and improvement plans.
- Produce executive-level briefings and reports on insider threat activities, risks, trends, and program performance.
- Lead weekly technical briefings and stakeholder meetings, providing status updates, risk insights, and operational metrics.
- Track action items, risks, and issues, and ensure timely resolution in coordination with government stakeholders.
- Support continuous improvement initiatives through performance metrics, feedback loops, and lessons learned.
Benefits
- 3 weeks of Personal Leave your first year
- 11 paid Holidays each year
- 5 days of Flexible Time Off each year
- 401(k) company match at 50% up to 10% of your salary
- Medical, Dental and Vision Insurance
- Life and Disability Insurance
- Public Transportation Subsidies
- Certifications and Training Allowance - Up to $5,000/year!
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
