Title: Hunt Team Member
Location: On-Site in Springfield, VA
Employment Type: Full-Time
Clearance Required: TS/SCI
The Client: This role is with a Northern Virginia-based, small federal technology firm that delivers mission-critical data management, advanced analytics, application development, and IT services to national security customers.
Work Schedule: *Total schedule will remain 40 hours per week*
*You willl have 2 consecutive days off each week, regardless of shift mix*
Initial Trianing Period (first few months)
After extended coverage schedule begins:
- 2-3 weekday shifts: 3 PM - 11 PM
- Weekend shift: one shift between 6 AM - 6 PM
- Additional weekday shifts as needed: 9 AM - 5 PM
Job Overview: We're looking for a Team Analyst to join our Insider Threat team. In this role, you will proactively hunt for insider threats within the DHS enterprise network. You'll analyze user behavior, detect unusual activity, and help prevent security incidents.
Key Responsibilities: Threat Hunting & Analysis
Actively
search for insider threat activity across logs, network traffic, EDR tools, and platforms.
Use
behavioral analysis and anomaly detection to identify suspicious patterns.
Work with User and Entity Behavior Analytics (UEBA) tools to detect unusual user activity.
Combine data from multiple sources (e.g., endpoint, identity, cloud activity) to
produce threat insights.
Experience with machine learning and AI-based analysis is a plus.
Detection Engineering
Create and refine insider threat detection rules based on risk and user behavior.
Build custom detection alerts and rules using DHS tools.
Adjust alerts to
reduce false positives while keeping strong threat coverage.
Incident Response Support
Work closely with forensic analysts, HR, and legal teams during insider threat investigations.
Assist with triage and response efforts while ensuring evidence is handled properly and privacy is respected.
Document your findings in reports and brief stakeholders on the risk and response.
#LI-VG1
Never miss an opportunity! Create an alert based on the job you applied for.
