Highlights
As an Insider Threat Support Analyst, you will focus on identifying, assessing, and mitigating risks posed by trusted individuals including employees, contractors, and partners who may intentionally or unintentionally harm organizational systems, data, or personnel. Independently run daily operations, proactively identifying and triaging indicators of malicious, negligent, or coerced insider risk across multiple telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
Numbers & Facts
| Location | Camp Springs, MD |
| Industry | Healthcare Services |
| Company Size | 500 to 999 employees |
| Year Founded | 2017 |
| Website | http://www.quadrantinc.com/ |
Description
Insider Threat Support Analyst
Camp Springs, MD (on-site)
Pay From: $60.00 per hour
MUST:
Experienced Insider Threat Support Analyst
Top Secret clearance required
Must have at least one active certification: Security+ or ISC2 CISSP (or other comparable certifications)
2 years of dedicated experience in insider threat detection, APT mitigation, and User Activity Monitoring (e.g., Teramind).
2+ years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.), including UI/GUI development and operational roles. Familiarity with DLP, EDR/NDR, and IAM logging.
Bachelors preferred (Additional experience can be accepted in leu)
DUTIES:
The ideal candidate will have a strong background in cybersecurity and risk management, serving as a critical member of the Cyber Intelligence Operations program's dedicated insider-risk element (InT).
As an Insider Threat Support Analyst, you will focus on identifying, assessing, and mitigating risks posed by trusted individuals including employees, contractors, and partners who may intentionally or unintentionally harm organizational systems, data, or personnel.
Emphasizing departing-employee and high-risk user scenarios, you will leverage telemetry from DLP, SIEM (Splunk), EDR/NDR, cloud storage, email, VPN/web, UAM (Teramind), and IAM logs.
Independently run daily operations, proactively identifying and triaging indicators of malicious, negligent, or coerced insider risk across multiple telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
Conduct end-to-end, self-directed risk scoring and categorization of user activity. Document notable cases, gather evidence, and recommend containment actions without requiring step-by-step guidance.
Work closely and dynamically within a small, specialized unit to share insights, cover operational gaps, and contribute insider updates to internal briefs and situational awareness (e.g., standups/shift changes).
Proactively maintain and refine a prioritized insider use-case catalog. Take ownership of weekly coordination with Applied Intelligence and platform owners to adjust playbooks and update risk-scoring thresholds.
Author Monthly InT Summaries focusing on insider-specific metrics, false positive trends, and emerging risk patterns. Act as the self-directed lead for designated case reviews to identify detection, process, and monitoring gaps.
Independently utilize SPLUNK architecture and UI/GUI development skills to optimize data analysis workflows. Oversee User Activity Monitoring (UAM) tools like Teramind to support robust incident reporting.
Quadrant is an affirmative action/equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, status as a protected veteran, or status as an individual with a disability. Healthcare benefits are offered to all eligible employees according to compliance mandated by the Affordable Care Act .
Camp Springs, MD (on-site)
Pay From: $60.00 per hour
MUST:
Experienced Insider Threat Support Analyst
Top Secret clearance required
Must have at least one active certification: Security+ or ISC2 CISSP (or other comparable certifications)
2 years of dedicated experience in insider threat detection, APT mitigation, and User Activity Monitoring (e.g., Teramind).
2+ years of experience with SPLUNK architecture (indexer, forwarder, search heads, etc.), including UI/GUI development and operational roles. Familiarity with DLP, EDR/NDR, and IAM logging.
Bachelors preferred (Additional experience can be accepted in leu)
DUTIES:
The ideal candidate will have a strong background in cybersecurity and risk management, serving as a critical member of the Cyber Intelligence Operations program's dedicated insider-risk element (InT).
As an Insider Threat Support Analyst, you will focus on identifying, assessing, and mitigating risks posed by trusted individuals including employees, contractors, and partners who may intentionally or unintentionally harm organizational systems, data, or personnel.
Emphasizing departing-employee and high-risk user scenarios, you will leverage telemetry from DLP, SIEM (Splunk), EDR/NDR, cloud storage, email, VPN/web, UAM (Teramind), and IAM logs.
Independently run daily operations, proactively identifying and triaging indicators of malicious, negligent, or coerced insider risk across multiple telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
Conduct end-to-end, self-directed risk scoring and categorization of user activity. Document notable cases, gather evidence, and recommend containment actions without requiring step-by-step guidance.
Work closely and dynamically within a small, specialized unit to share insights, cover operational gaps, and contribute insider updates to internal briefs and situational awareness (e.g., standups/shift changes).
Proactively maintain and refine a prioritized insider use-case catalog. Take ownership of weekly coordination with Applied Intelligence and platform owners to adjust playbooks and update risk-scoring thresholds.
Author Monthly InT Summaries focusing on insider-specific metrics, false positive trends, and emerging risk patterns. Act as the self-directed lead for designated case reviews to identify detection, process, and monitoring gaps.
Independently utilize SPLUNK architecture and UI/GUI development skills to optimize data analysis workflows. Oversee User Activity Monitoring (UAM) tools like Teramind to support robust incident reporting.
About Company
Quadrant is a full-life cycle staff augmentation agency providing a proven "rapid fire" approach in responding to the needs of our clients. Quadrant offers a comprehensive suite of staffing solutions for organizations in the Healthcare, Medical, Dental, Information Technology, HR and Government contract sectors.
Our clients have come to include some of the largest and most recognized brand named companies in the Washington, DC and Baltimore, MD metropolitan regions. Quadrant is a DOD TOP Secret cleared facility and holds a Maryland Minority Business Enterprise (MBE) and Virginia SWaM certification. Quadrant's clients are rapidly hiring a mix of healthcare, medical, dental, information technology, recruiting and HR professionals.
Quadrant is recognized as the largest Healthcare Staffing agency in the Washington DC area. We support every major healthcare system and thousands of area healthcare practices. Our healthcare division focuses on all clinical and nonclinical staff with the exception of physicians. Our database boasts hundreds of thousands of local screened healthcare professionals; the largest in the area. Our resources enable us to respond to our clients requests quickly, generally within 24 hours of request on mainstream orders.
Our Information Technology clients support a broad mix of commercial and federal government agencies. Our clients include government contractors who support projects with federal agencies such as U.S. Department of Veterans Affairs, National Institutes of Health(NIH), U.S. Customs and Border Patrol, FDA, FBI, USPTO, DHS, DHHS, DOD, DOJ, DOE, DISA, and USPS. In addition to our federal portfolio, Quadrant also supports a range of commercial clients focusing in software, telecom, mobile, web and healthcare development.
Whether you are a job seeker or a company with open positions to fill we will bridge the talent gap. Contact any of our seasoned professional recruiters or account managers and we will walk you through our proven staffing methodology. We offer a consultative approach to both potential employee and employer. We seek the right match, at the right time, every time.