Insider Threat Analyst

Overview

We are seeking an Insider Threat Analyst in Arlington, VA and other locations. This role may offer remote work with approval.

• Detection, Alerting & Analysis: review and triage alerts from DTEX, Microsoft Purview, and other monitoring platforms.
• Develop, tune, and optimize insider threat detection use cases across UEBA, DLP, SIEM, and endpoint monitoring platforms.
• Monitor and analyze DTEX telemetry to identify high-risk user behaviors and potential data exfiltration activities.
• Leverage Microsoft Purview for data loss prevention, information protection, and insider risk management capabilities.
• Utilize Microsoft Entra  identity analytics, access reviews, and monitoring privileged account activity.
• Conduct behavioral analysis to identify anomalous patterns indicative of data exfiltration, fraud, sabotage, or policy violations.
• Perform proactive threat hunting to discover previously undetected insider risks and develop corresponding detection mechanisms.
• Analyze technical indicators alongside contextual information such as HR events, travel data, and organizational changes to assess risk holistically.
• Conduct investigations of insider threat incidents from initial triage through remediation.
• Coordinate with Legal, HR, and external law enforcement during sensitive investigations.
• Prepare detailed investigation reports and briefings for leadership.
• Create, maintain, and update insider threat playbooks and response procedures.
• Contribute to insider threat program strategy and maturity roadmap.
• Develop and maintain insider threat metrics, KPIs, and dashboards to measure program effectiveness.
• Manage and deliver insider threat awareness training for employees, managers, and security teams.
• Stay current on insider threat trends, TTPs, and emerging technologies; recommend program enhancements.

• Bachelor's degree minimum.
• Minimum 5+ years of experience in insider threat analysis or a related cybersecurity discipline.
• Minimum 5+ years’ experience with DTEX or similar insider threat monitoring platforms.
• U.S. citizenship, permanent residency, or green card holder, workers granted asylum or refugee status.
• MUST NOT be a People's Republic of China national or Russian national unless also a U.S. citizen.
• Strong technical expertise, investigative capability, and excellent interpersonal skills.

• Hands‑on experience with Microsoft Purview (Insider Risk Management, DLP, Information Protection) and Microsoft Entra .
• Experience with UEBA platforms (e.g., Securonix, Exabeam, Microsoft Sentinel) and DLP solutions.
• Proficiency with SIEM platforms, log analysis, and query languages (e.g., Splunk SPL, KQL, SQL).
• Experience drafting security procedures, playbooks, and technical documentation.
• Excellent written and verbal communication skills.
• Counterintelligence experience, especially in technology protection, economic espionage, or protecting proprietary information and trade secrets.
• Background in identifying and mitigating threats from foreign intelligence services or competitors targeting intellectual property.
• Experience contributing to insider threat program development and maturation.
• Familiarity with behavioral psychology, social engineering tactics, and human‑centered security approaches.

Non-Incentive Eligible. The pay range for this role is $89,000 – $112,000 annually. Actual compensation may vary based on skills and qualifications.

Benefits include competitive salary, flexible work schedule, employer‑subsidized health, dental, and vision insurance, 401(k) match for student loan repayment, equity options, paid holidays, paid parental leave, employee discounts, and more.

Quantinuum is an equal opportunity employer. You will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, sexual orientation, gender identity or expression, disability, nationality, sex, or veteran status. Workplace discrimination is illegal.

We may use AI tools to support parts of the hiring process. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are made by humans. Contact us for more information about how your data is processed.