Insider Threat Program Hunt Team Analyst

The Digital Modernization Sector at Leidos currently has an opening for a Hunt Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP) supporting the Cybersecurity and Infrastructure Security Agency (CISA). This is an exciting opportunity to use your experience to support, sustain, design and evolve the backbone of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS and CISA missions in safeguarding the homeland. The selected candidate will be responsible for the following: Review, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators. Provide analytical, program support services related to the operation of UAM/ UEBA tool. Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response. Identify and triage critical/high risk UAM alerts related to a potential insider threat risk to the DHS enterprise. Leverage methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior. Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours and provide after-hour support). Normal business hours will be defined as 6am to 10pm Monday – Friday excluding weekends and scheduled holidays. Implement corrective actions to restore normal operations and prevent recurrence. Will author and produce written analytical and threat reporting to address and mitigate insider threat matters Will conduct routine liaison with DHS and CISA counterparts to deter, detect, and mitigate insider threat activity. Basic Qualifications: Bachelors degree and (12) years of prior relevant insider threat experience or Masters with (10) years of prior relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree. Minimum of 10 years demonstrated knowledge of the intelligence cycle, processes, and organizations. Minimum 10 years demonstrated knowledge of various research tools and procedures and methods of analyzing, compiling, reporting and disseminating intelligence data and information. Minimum of 10 years demonstrated knowledge of research and analytical techniques as applied to difficult and complex assignments in security, law enforcement, and counterintelligence analysis. Possess a strong analytical background. Possess a strong critical thinking Skills Have excellent written and verbal skills with ability to deliver briefings/written products and reports to a diverse group of audiences. Possess the ability to plan, coordinate, research and analyze all-source intelligence information for accuracy, timeliness, and relevance to mission. Possess knowledge of current domestic and international threats to U.S. national security interests. Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization. Be a self-starter capable of working independently to promote program goals. Working knowledge of User Activity Monitoring Software (UAM) and solutions. Working knowledge of Cybersecurity toolsets designed to support ITP mission activities. Working Knowledge of Open-Source toolsets. Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway Current TS/SCI and Must be a US Citizen Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph Preferred Qualifications: Master’s degree from an accredited college or university in Criminal Justice, Homeland Security, Cyber Security, or related field Proven experience (10 years) in Intelligence Analysis Experience with User Activity Monitoring products and platforms Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F) Certified Counter-Insider Threat Professional - Analysis (CCITP-A) Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC) Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU At Leidos, we don’t want someone who "fits the mold"—we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, “what’s next?” before the dust settles on “what’s now.” If you’re already scheming step 20 while everyone else is still debating step 2… good. You’ll fit right in. Original Posting: January 7, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $105,300.00 - $190,350.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. Leidos Leidos is a Fortune 500® innovation company rapidly addressing the world's most vexing challenges in national security and health. The company's global workforce of 47,000 collaborates to create smarter technology solutions for customers in heavily regulated industries. Headquartered in Reston, Virginia, Leidos reported annual revenue of approximately $15.4 billion for the fiscal year ended December 29, 2023. For more information visit www.Leidos.com. Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here. Securing Your Data Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to spam.leidos@leidos.com. Commitment and Diversity All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Salary : $105,300 - $190,350