Insider Threat Support Analyst

Responsibilities: for the Insider Threat Support Analyst include: Monitor and triage insider threat alerts across Splunk, DLP, EDR, IAM, and user activity monitoring tools. Investigate suspicious user behavior, potential data exfiltration, and policy violations. Apply risk-scoring methodologies to assess and prioritize insider threat events. Document investigative findings, evidence, and recommended actions. Develop and maintain Splunk dashboards, searches, and reporting capabilities. Collaborate with cybersecurity, incident response, and intelligence teams on investigations. Support insider threat trend analysis, reporting, and monitoring improvements. Qualifications: for the Insider Threat Support Analyst include: Active Top Secret Clearance with SCI eligibility. Active Security+, CISSP, or equivalent cybersecurity certification. Bachelor's degree in a related field or 2+ years of insider threat or user activity monitoring experience. 2+ years of hands-on Splunk experience, including dashboards and search development. Experience with DLP, EDR/NDR, IAM, and user activity monitoring tools such as Teramind. Strong analytical, investigative, documentation, and communication skills.