Insider Threat Support Analyst

Evolver · MD
Work typeOn-site
Pay · estimate~$45k – $65kMarket rate · not set by employer
PostedNov 15, 2026
LevelMid level
In short Evolver is an information technology, cybersecurity, and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations.

📋 About the job

Evolver is an information technology, cybersecurity, and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated technology capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.

Evolver is seeking a talented and motivated Insider Threat Support Analyst to join our team onsite in Camp Springs, MD.

The ideal candidate will have a strong background in cybersecurity and risk management, serving as a critical member of the Cyber Intelligence Operations program's dedicated insider-risk element (InT). As an Insider Threat Support Analyst, you will focus on identifying, assessing, and mitigating risks posed by trusted individuals including employees, contractors, and partners who may intentionally or unintentionally harm organizational systems, data, or personnel. Operating as a highly motivated self-starter within a lean, agile team, you must possess the technical drive and critical thinking needed to execute complex investigations and refine detection strategies with minimal oversight. Emphasizing departing-employee and high-risk user scenarios, you will leverage telemetry from DLP, SIEM (Splunk), EDR/NDR, cloud storage, email, VPN/web, UAM (Teramind), and IAM logs. You will maintain prioritized insider use-case catalogs, apply defensible risk scoring, and collaborate with cross-functional teams to define requirements for automation-first playbooks, all while ensuring strict alignment with policy, privacy, civil liberties, and inspection requirements.

Responsibilities

  • Independently run daily operations, proactively identifying and triaging indicators of malicious, negligent, or coerced insider risk across multiple telemetry sources (DLP, SIEM, EDR/NDR, UAM, IAM).
  • Conduct end-to-end, self-directed risk scoring and categorization of user activity. Document notable cases, gather evidence, and recommend containment actions without requiring step-by-step guidance.
  • Work closely and dynamically within a small, specialized unit to share insights, cover oper…
📄 Read the full description → The rest of this listing is on the hiring partner’s site.
Interested in this role?Apply in one click — no JobQ account needed.
Apply now →
Insider Threat Support AnalystEvolver
Apply now