Insider Threat Monitoring Analyst - Mid-Level U.S. Citizenship & CBP BI - Trust

Start Your Adventure at Via Logic

Location: Primarily onsite at a government site in Ashburn, VA. Specific worksite expectations will be confirmed for the assignment.

Type: Full-time, W-2

Compensation: $106,000–$126,000 annually, depending on experience and qualifications.

Experience: 3+ years of relevant experience

Join Via Logic supporting U.S. Customs and Border Protection cybersecurity operations. As a Mid-Level Insider Threat Monitoring Analyst, you'll support insider threat monitoring activities by analyzing user behavior, access patterns, and security events to identify potential insider threat indicators.

You'll use insider threat monitoring and security tools to identify anomalous activity, investigate alerts, and determine whether activity may represent an insider threat, data loss, or security policy concern. You'll also support security investigations and help document findings that protect sensitive information and government systems.

• Be a U.S. citizen.
• Be able to obtain and maintain the required CBP background investigation and suitability determination for access to government facilities and systems.
• Be available to work onsite, primarily in Ashburn, VA, with specific worksite and travel expectations confirmed for the assignment.

• Support insider threat monitoring activities by analyzing user behavior, access patterns, security events, and other relevant activity for potential insider threat indicators.
• Monitor Data Loss Prevention (DLP) solutions and other applicable security tools to support insider threat and security operations investigations.
• Investigate DLP alerts involving potential data exfiltration of CBP mission data or sensitive employee information.
• Support User Activity Monitoring (UAM) activities and investigative tasks as directed by government staff.
• Monitor network activity for potential misuse and security policy violations.
• Analyze alerts and investigative information to identify suspicious or anomalous activity and support appropriate investigative action.
• Support investigations involving potential malicious activity, alleged criminal activity, or unauthorized disclosure of information.
• Support sensitive-data spillage response by helping assess incidents and recommending appropriate handling and sanitization methods in accordance with applicable guidance and procedures.
• Monitor government laptops and mobile devices associated with foreign travel for suspicious activity and policy violations.
• Recommend improvements to insider threat alert triggers and detections across security tools and logging sources.
• Document investigative activity and contribute to incident notifications, case analysis, reports, and other required work products.

• 3+ years of relevant professional experience in cybersecurity operations, insider threat monitoring, security investigations, incident detection and response, cyber forensics, or a related area.
• Experience analyzing user activity, security events, alerts, logs, or similar technical data to identify suspicious or anomalous behavior.
• Experience investigating or supporting investigations involving security incidents, policy violations, data loss, or potentially unauthorized activity.
• Knowledge of Data Loss Prevention (DLP), User Activity Monitoring (UAM), or similar security monitoring concepts and capabilities.
• Ability to analyze information from multiple sources, identify relevant patterns or concerns, and document investigative findings clearly.
• Ability to communicate technical findings and collaborate effectively with security analysts, investigators, government personnel, and other stakeholders.

• Experience working within or closely…