Insider Threat Analyst

About the Role

STAFFXPERT LLC is recruiting an Insider Threat Analyst for a position based in Washington, DC. This role follows a hybrid model with three days onsite and two days remote weekly. The ideal candidate is an experienced cybersecurity professional specializing in insider threat detection, investigations, intelligence analysis, or corporate security.

Key Responsibilities

• Develop and maintain enterprise insider threat programs, including crafting policies, procedures, and related operational workflows.
• Monitor security alerts, efficiently triage security events, and conduct investigations into possible insider threat activities.
• Gather, analyze, and interpret threat intelligence from both internal and external sources to identify new risks and potential vulnerabilities.
• Leverage Microsoft security tools—specifically Microsoft Sentinel—to detect, investigate, and manage security incidents in both cloud and on-premises settings.
• Collaborate with various organizational units such as cybersecurity, Human Resources, Legal, Compliance, and other business teams to support insider threat investigations.
• Maintain thorough records of investigations, document findings comprehensively, and prepare risk assessment reports.
• Advise on enhancements to insider threat detection, monitoring systems, and security controls to strengthen defenses.
• Contribute to ongoing improvements of enterprise security operations and incident response efforts.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or another related technical field.
• Minimum three years of professional experience in insider threat roles, cybersecurity, intelligence analysis, investigative work, law enforcement, counterintelligence, or corporate security.
• Proven track record developing and executing insider threat programs and policies.
• Experience in monitoring security incidents, triaging alerts, and thorough investigation of insider threat or related security incidents.
• Hands-on expertise collecting and analyzing threat intelligence from diverse sources.
• Familiarity with Microsoft security technologies, including Microsoft Sentinel.
• Excellent analytical thinking, investigative skills, and problem-solving capabilities.
• Strong communication skills—both written and verbal—and a demonstrated ability to work effectively with cross-functional teams.

Preferred Qualifications

• Experience with other security tools such as Qualys, CrowdStrike, Cloudflare, CyberArk, and SolarWinds.
• Professional certifications like CISSP, GIAC, CEH, CompTIA Security+, CompTIA Network+, or equivalent qualifications.
• Experience operating in regulated industries or government sectors.
• Eligibility to obtain and maintain a Public Trust security clearance.