Senior Insider Threat Analyst

Anduril Industries • Reston, VA

1d

About The Position

Anduril's Insider Threat team is looking for a senior cybersecurity analyst to protect Anduril Intelligence Systems (AIS) from internal security threats. This analyst will be a critical part of analyzing anomalous activities, running investigations, and working across the business line. This role will be a key stakeholder within the Anduril Information Security team implementing forward-leaning, innovative insider threat & counterintelligence detections and mitigations.

Requirements

• Action-oriented analyst with the ability to work autonomously and take ownership of complex projects.
• Knowledge of modern adversary tradecraft and mitigating controls.
• Proven experience in insider threat investigations, digital forensics, and incident response.
• Ability to analyze large datasets across various systems (SIEM, data lake, etc.).
• Experience with Endpoint Detection and Response (EDR) tools, Data Loss Prevention (DLP), and other telemetry sources.
• Excellent analytical skills, capable of interpreting complex data and deriving actionable insights.
• Capable of handling highly sensitive investigations with utmost discretion.
• Currently possesses and can maintain an active U.S. Top Secret SCI security clearance.

Nice To Haves

• Experience in one or more general purpose languages (Python, Go, etc) and familiarity with one or more infrastructure as code languages (e.g., Terraform, AWS CDK) in a production capacity.
• Experience building controls around export controlled information, CUI, and other sensitive data.
• Understanding of counterintelligence concepts and their application in security operations, particularly for identifying and addressing insider threats.

Responsibilities

• Support Anduril Intelligence Systems as our front line responder by identifying, triaging, investigating, and remediating Insider Threat related security detections and anomalies.
• Own Insider Threat investigations from end to end.
• Lead evaluating and implementing controls to reduce Anduril's attack surface from an insider threat.
• Produce dashboards and metrics to support and streamline incident response and investigations.
• Perform threat hunting and identify anomalies within the environment to uncover insider threat activity.
• Communicate technical security concerns and issues to a non-technical audience.
• Deeply embed yourself within the AIS business line and form relationships with key stakeholders.

Benefits

• Highly competitive equity grants are included in the majority of full time offers; and are considered part of Anduril's total compensation package.
• Additionally, Anduril offers top-tier benefits for full-time employees, including: Benefits At Anduril, we invest in our people. Our comprehensive, competitive benefits package (available at little to no cost to employees) ensures you’re supported in health, recovery, and whatever comes next.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior