Senior Insider Threat Hunt Cybersecurity Analyst

The Senior Insider Threat Hunt Analyst supports the DHS Insider Threat Program by proactively identifying and investigating risky or malicious user behavior. In this on-site role, you will hunt across enterprise data, logs, EDR tools, and network traffic using UAM and UEBA platforms, triage and analyze high-priority alerts, and research behavioral patterns to detect insider threat indicators. You will document findings, brief stakeholders, and recommend mitigation strategies to reduce risk to mission systems and data.

Responsibilities

• Conduct proactive insider threat hunts across DHS networks, logs, EDR tools, and network traffic to detect anomalous user activity.
• Analyze and correlate insider threat data to identify trends, patterns, and potential risk indicators.
• Monitor and operate UAM and UEBA platforms, baselining behavior and triaging critical/high alerts within required timeframes.
• Research and investigate concerning user behaviors, documenting findings and supporting insider threat investigations.
• Coordinate with security and investigative stakeholders to recommend mitigation strategies that reduce insider threat risk.
• Support continuous improvement of insider threat detection methodologies, analytics, and hunt processes.
• Prepare and deliver clear written reports and briefings to diverse technical and non-technical audiences.
• Collaborate with program teams to identify emerging insider threat requirements and refine monitoring rules and use cases.

Required Skills

• Insider threat hunting
• User and Entity Behavior Analytics (UEBA)
• User Activity Monitoring (UAM) tools
• Cybersecurity monitoring and incident analysis
• Threat assessment and mitigation methodologies
• Log and network traffic analysis
• Intelligence analysis tradecraft
• Open-source intelligence (OSINT) tools
• Report writing and analytic briefing
• Insider Threat frameworks (Pathway to Violence, Critical Pathway)