Insider Threat Support Analyst

Evolver is an information technology, cybersecurity, and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated technology capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.

Evolver Federal is seeking a talented and motivated Insider Threat Support Analyst to join our team onsite in Camp Springs, MD. The ideal candidate will have a strong background in cybersecurity, with expertise in insider threat detection and mitigation technologies such as Teramind and Splunk. As an Insider Threat Support Analyst, you will play a critical role in monitoring, analyzing, and responding to insider threats and APTs, while also possessing proficiency in SPLUNK architecture and UI/GUI development.

Responsibilities:

• Monitor and analyze user activity using insider threat detection tools such as Teramind.
• Investigate and respond to alerts related to insider threats and APTs, identifying potential security incidents.
• Collaborate with cross-functional teams to develop and implement strategies to mitigate insider threats and APTs.
• Utilize SPLUNK architecture and UI/GUI development skills to optimize data analysis workflows and enhance operational efficiency.
• Provide support and guidance to internal teams on insider threat detection best practices and procedures.
• Interface with stakeholders to understand insider threat detection requirements and priorities.
• Ensure compliance with security protocols and procedures, including maintaining active certifications such as
• Security+ or ISC2 CISSP.

Basic Qualifications

• Have and maintain at least one active certification:
  Security+ or ISC2 CISSP, or other comparable certification approved in advance by the SOC PM on a case-by-case basis.
• Bachelor's degree in Computer Science, Information Security, or related field, or a minimum of two years of experience with Teramind, Splunk, Insider Threat, and APT.
• 2 years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.) and experience with SPLUNK UI/GUI development and operational roles.
• 2 years of experience in insider threat detection and mitigation techniques.
• Must meet SCI eligibility (ICD 704) with no waivers or conditions.

Preferred Qualifications

• 3+ years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.) and experience with SPLUNK UI/GUI development and operational roles.
• Strong analytical and problem-solving skills, with the ability to dissect complex security incidents and communicate findings effectively.
• 3+ years of experience in insider threat detection and mitigation techniques.
• Familiarity with security incident response procedures and methodologies.
• Ability to work independently and collaboratively in a fast-paced environment.
• Excellent communication and interpersonal skills.

Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.

Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.