Insider Threat Program Hunt Analyst

Posted 2 Days Ago
Be an Early Applicant
Springfield, VA, USA
In-Office
87K-157K Annually
Senior level
Information Technology • Software
The Role
Conduct insider-threat hunting and analysis across DHS data, logs, platforms, EDR tools, and network traffic. Operate UAM and UEBA platforms to identify anomalous behavior, policy violations, and emerging threats; investigate alerts, establish behavioral baselines, coordinate enterprise responses, and recommend mitigation strategies. The role also provides program support, stakeholder briefings, and continuous threat-hunting operations for the DHS Insider Threat Program.
Summary Generated by Built In

The Digital Sector at Leidos currently has an opening for a Hunt Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the database backbone of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.


The selected candidate will be responsible for the following:

  • Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
  • Provide analytical, program support services related to the operation of UAM/ UEBA tool.
  • Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response.
  • Conduct further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise.
  • Provide proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
  • Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
  • Identify mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
  • Utilize UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations.
  • Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours).

Basic Qualifications:

  • Bachelors degree and 4-8 years of prior relevant insider threat experience or relevant experience. Additional years of experience with requisite certifications will be considered in leu of degree.
  • Minimum of 4 years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
  • Minimum of 4 years demonstrated knowledge of Threat Assessment & Mitigation Strategies.
  • Have excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
  • Possess knowledge of current domestic and international threats to U.S. national security interests.
  • Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
  • Be a self-starter capable of working independently to promote program goals.
  • Working knowledge of User Activity Monitoring Software (UAM) and solutions.
  • Working knowledge of Cybersecurity toolsets designed to support ITP mission activities.
  • Working Knowledge of Open-Source toolsets.
  • Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway.
  • Current TS/SCI and Must be a US Citizen.
  • Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph.

Preferred Qualifications:

  • Master’s degree from an accredited college or university in Criminal Justice, Homeland security, Cyber Security, or related field 
  • Proven experience (4+ years) in Intelligence Analysis  
  • Experience with User Activity Monitoring products and platforms
  • Proven experience (4+ years) in Threat Assessment & Mitigation
  • Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F)
  • Certified Counter-Insider Threat Professional - Analysis (CCITP-A)
  • Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC)
  • Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop
  • Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:October 21, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Skills Required

  • Bachelor’s degree and 4–8 years of relevant insider threat experience, or equivalent relevant experience with requisite certifications in lieu of a degree.
  • At least 4 years of knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
  • At least 4 years of knowledge of Threat Assessment and Mitigation Strategies.
  • Excellent written and verbal communication skills, including the ability to deliver briefings to diverse audiences.
  • Knowledge of current domestic and international threats to U.S. national security interests.
  • Ability to establish networks with security, personnel, and prevention stakeholders.
  • Ability to work independently and promote program goals.
  • Working knowledge of User Activity Monitoring software and solutions.
  • Working knowledge of cybersecurity toolsets supporting insider threat program activities.
  • Working knowledge of open-source toolsets.
  • Working knowledge of insider threat frameworks, including Pathway to Violence and Critical Pathway.
  • Current TS/SCI clearance.
  • U.S. citizenship.
  • Ability to obtain DHS EOD SCI and willingness to undergo a CI polygraph.
  • Master’s degree in Criminal Justice, Homeland Security, Cybersecurity, or a related field.
  • At least 4 years of intelligence analysis experience.
  • Experience with User Activity Monitoring products and platforms.
  • At least 4 years of Threat Assessment and Mitigation experience.
  • Certified Counter-Insider Threat Professional – Fundamentals (CCITP-F).
  • Certified Counter-Insider Threat Professional – Analysis (CCITP-A).
  • Completion of the CDSE Insider Threat Detection Analysis Course (ITDAC).
  • Completion of the Workplace Assessment of Violence Risk (WAVR-21) Workshop.
  • Completion of CDSE INT311.CU, INT312.CU, and CI201.CU curricula.

Leidos Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Leidos and has not been reviewed or approved by Leidos.

  • Healthcare Strength — Healthcare coverage is described as comprehensive, with multiple plan options, low office-visit copays in some plans, and access to mental health and wellness support tools. The availability of HSA/FSA options and employer contributions is positioned as a meaningful part of the total package.
  • Retirement Support — Retirement benefits are framed as a strong component of total rewards, highlighted by a 401(k) match and immediate vesting in the standard package. The Employee Stock Purchase Plan is also presented as an additional long-term wealth-building feature.
  • Wellbeing & Lifestyle Benefits — Wellbeing and lifestyle supports extend beyond core insurance, including wellness programs, fitness-related stipends, and assistance resources. Work flexibility and related perks are also included as part of the broader rewards experience.

Leidos Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Reston, VA
27,104 Employees
Year Founded: 1969

What We Do

We Are Leidos For 50 years we have been tackling some of the biggest problems that face our nation and our world. OUR MISSION Through our culture of innovation and history of performance, we develop deep customer trust built on integrity and create enduring solutions that improve our world. Leidos is a science and technology solutions leader working to address some of the world’s toughest challenges in the defense, intelligence, homeland security, civil, and healthcare markets. The company’s 43,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Va., Leidos reported annual revenues of approximately $11.09 billion for the fiscal year ended January 3, 2020. Leidos was cited for the meaningful work employees perform that is challenging, impactful, and aligned with our customers’ missions as reasons professionals want to work and stay at our company. Leidos has also been named to lists including Forbes’ Best Employers for Diversity, Forbes’ America’s Best Employers for Women, Military Times Best for Vets Employers, and Ethisphere Institute’s World's Most Ethical Companies®. Employees enjoy career enrichment opportunities available through mobility and development and experience rewarding relationships with supportive supervisors and talented colleagues and customers. Employees appreciate our flexible work environment, allowing for and encouraging a true work-life balance. Our professionals are also excited about our Employee Resource Groups, like the newly launched Collaborative Outreach with Remote and Embedded Employees (CORE), which strives to create an environment where every employee, regardless of location, feels fully engaged as a valued employee of Leidos. Your most important work is ahead.

Similar Jobs

M9 Solutions Logo M9 Solutions

Insider Threat Program Hunt Team Analyst

Cloud • Information Technology • Software • Consulting
In-Office
Springfield, VA, USA
86 Employees
60K-180K Annually

Zscaler Logo Zscaler

Manager, Sales Engineering - SMB

Cloud • Information Technology • Security • Software • Cybersecurity
Easy Apply
Remote or Hybrid
USA
8697 Employees
155K-221K Annually

PwC Logo PwC

Managed Services - Strategic PMO Director

Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Hybrid
67 Locations
370000 Employees
155K-410K Annually

PwC Logo PwC

ServiceNow Deployment- Manager

Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Hybrid
62 Locations
370000 Employees
99K-232K Annually

Similar Companies Hiring

Ford Energy Thumbnail
Automotive • Software • Energy • Utilities • Manufacturing • Renewable Energy
Glendale, Kentucky
55 Employees
Revel Thumbnail
Aerospace • Hardware • Robotics • Software
Marina Del Rey, California
70 Employees
Blee Thumbnail
Artificial Intelligence • Marketing Tech • Software
New York, New York
33 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account