Insider Threat Support Analyst

Summary

Insider Threat Support Analyst

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency supporting immigration and homeland security operations. This position is onsite in Camp Springs, MD (Washington, DC metro area) supporting a cybersecurity program focused on insider threat detection and risk mitigation.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Qualifications

• Active Top Secret Clearance with SCI eligibility.
• Active Security+, CISSP, or equivalent cybersecurity certification.
• Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk experience, including dashboards and search development.
• Experience with DLP, EDR/NDR, IAM, and user activity monitoring tools such as Teramind.
• Strong analytical, investigative, documentation, and communication skills.

Compensation

• Salary: Up to $130,000
• PTO
• Paid Holidays
• Medical
• Dental
• Vision
• 401K
• Tuition Reimbursement
• Paid Maternity Leave
• Military Reserve Pay Offset

Job Description

Insider Threat Support Analyst

Zachary Piper Solutions is seeking an Insider Threat Support Analyst to support a federal agency supporting immigration and homeland security operations. This position is onsite in Camp Springs, MD (Washington, DC metro area) supporting a cybersecurity program focused on insider threat detection and risk mitigation.

Responsibilities

• Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools.
• Investigate suspicious user behavior, potential data exfiltration, and policy violations.
• Apply risk-scoring methodologies to assess and prioritize insider threat events.
• Document investigative findings, evidence, and recommended actions.
• Develop and maintain Splunk dashboards, searches, and reporting capabilities.
• Collaborate with cybersecurity, incident response, and intelligence teams on investigations.
• Support insider threat trend analysis, reporting, and monitoring improvements.

Qualifications

• Active Top Secret Clearance with SCI eligibility.
• Active Security+, CISSP, or equivalent cybersecurity certification.
• Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience.
• 2+ years of hands-on Splunk experience, including dashboards and search development.
• Experience with DLP, EDR/NDR, IAM, and user activity monitoring tools such as Teramind.
• Strong analytical, investigative, documentation, and communication skills.

Compensation

• Salary: Up to $130,000
• PTO
• Paid Holidays
• Medical
• Dental
• Vision
• 401K
• Tuition Reimbursement
• Paid Maternity Leave
• Military Reserve Pay Offset