Insider Threat Support Analyst

Evolver Federal•Camp Springs, MD

3d•$120,000 - $150,000•Onsite

About The Position

Evolver Federal is seeking a talented and motivated Insider Threat Support Analyst to join our team onsite in Camp Springs, MD. The ideal candidate will have a strong background in cybersecurity, with expertise in insider threat detection and mitigation technologies such as Teramind and Splunk. As an Insider Threat Support Analyst, you will play a critical role in monitoring, analyzing, and responding to insider threats and APTs, while also possessing proficiency in SPLUNK architecture and UI/GUI development.

Requirements

Have and maintain at least one active certification: Security+ or ISC2 CISSP, or other comparable certification approved in advance by the SOC PM on a case-by-case basis.
Bachelor's degree in Computer Science, Information Security, or related field, or a minimum of two years of experience with Teramind, Splunk, Insider Threat, and APT.
2 years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.) and experience with SPLUNK UI/GUI development and operational roles.
2 years of experience in insider threat detection and mitigation techniques.
Must be a US Citizen with active Top Secret Clearance
Must meet SCI eligibility (ICD 704) with no waivers or conditions.

Nice To Haves

3+ years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.) and experience with SPLUNK UI/GUI development and operational roles.
Strong analytical and problem-solving skills, with the ability to dissect complex security incidents and communicate findings effectively.
3+ years of experience in insider threat detection and mitigation techniques.
Familiarity with security incident response procedures and methodologies.
Ability to work independently and collaboratively in a fast-paced environment.
Excellent communication and interpersonal skills.

Responsibilities

Monitor and analyze user activity using insider threat detection tools such as Teramind.
Investigate and respond to alerts related to insider threats and APTs, identifying potential security incidents.
Collaborate with cross-functional teams to develop and implement strategies to mitigate insider threats and APTs.
Utilize SPLUNK architecture and UI/GUI development skills to optimize data analysis workflows and enhance operational efficiency.
Provide support and guidance to internal teams on insider threat detection best practices and procedures.
Interface with stakeholders to understand insider threat detection requirements and priorities.
Ensure compliance with security protocols and procedures, including maintaining active certifications such as Security+ or ISC2 CISSP.