Talent.com
Insider Threat Engineer
Insider Threat EngineerLeidos • Baltimore, MD, United States
Insider Threat Engineer

Insider Threat Engineer

Leidos • Baltimore, MD, United States
1 day ago
Job type
  • Full-time
Job description

Leidos is seeking a highly skilled and experienced Insider Threat Engineer to support and maintain an enterprise-wide insider threat detection and response program at the Social Security Administration (SSA) . This position focuses on advancing the agency's capabilities in user activity monitoring (UAM), automation, data loss prevention (DLP-Trellix), automation, and technical threat detection to prevent unauthorized disclosures, fraud, and abuse.. The candidate will be instrumental in delivering analytical and engineering support to the Insider Threat Program Management Office (PMO) and may be required to deliver and receive sensitive briefings within SSA secured spaces such as the SCIF or approved alternate secure locations.

Join a high-performing cybersecurity team responsible for safeguarding the agency's data and supporting the SSA's mission to serve over 65 million Americans monthly.

If this sounds like a mission you want to be a part of, keep reading!

TEAM CULTURE

Your passion and values might be a good fit for our teams if you answer "yes" to the following questions :

  • Are you looking for a company that puts employees first, with a focus on career, flexibility, and well-being?
  • Do you enjoy collaborating with colleagues and teammates and believe that the best ideas are fostered in an inclusive environment?
  • Are you searching for a team with a strong sense of ownership, urgency, and drive for daily mission success?
  • Are you comfortable with proactive outward communication and technical leadership?
  • Do you enjoy being a catalyst, solving complex problems, and providing innovative solutions?
  • Do you have the flexibility, creativity, and resilience to pivot the mission for success?
  • Do you have the courage to make tough ethical decisions with pride, transparency, and respect?

MENTORSHIP & CAREER GROWTH

Our teams are dedicated to supporting new team members in an environment that celebrates knowledge sharing and mentorship. Experienced team members will be assigned to new hires for one-on-one mentoring, collaborative reviews, and coaching on customer engagement to help each new hire successfully onboard and demonstrate their skills. Projects and tasks are assigned in a way that leverages your strengths and will help you further develop your skillset.

KEY RESPONSIBILITIES

Every position we take is more rewarding when you know the why behind it. Know your work makes a difference to support those who need it most. If your passion is enabling life changing service to those around, you this is the place for you. Find you passion in a team environment where all members are valued regardless of contractor or employee status. Find your "Why" with us and take your place in our Leidos Family!!

Technical Engineering and Automation

  • Engineer, implement, and maintain User Activity Monitoring (UAM) and Data Loss Prevention (DLP) solutions, ensuring continuous visibility into user behavior and sensitive data usage.
  • Configure, maintain, and optimize Trellix endpoint security and DLP capabilities for insider threat use cases.
  • Experience leveraging Trellix DLP to detect and investigate insider threat behaviors, including sensitive data exfiltration, unauthorized file transfers, and anomalous user activity.
  • Automate detection, alerting, and reporting processes using Python, Ansible, or JSON to increase efficiency and accuracy.
  • Integrate UAM and DLP solutions with other enterprise cybersecurity tools (e.g., SIEM, SOAR, EDR, Trellix platform).
  • Develop dashboards and reports that highlight key insider threat indicators, anomalous activity, and program performance metrics.
  • Perform SOC related activities including monitoring, triaging, and investigating insider threat and DLP alerts to support timely detection and response.
  • Basic understanding in networking, cybersecurity principles, and experience with common security tools (e.g., firewalls, SIEM, DLP, endpoint security, vulnerability scanners).
  • Experience with Splunk for log analysis and developing use cases to support insider threat detection and reporting.
  • Demonstrated adaptability with an open mind toward learning new technologies and taking on challenging responsibilities in a dynamic environment.
  • Cyber Threat Detection & Analysis

  • Develop and refine methods to extract, analyze, and correlate data from SSA IT systems to proactively detect potential insider threats.
  • Monitor and analyze trends in cyber activity and anomalous behavior to assess risks to SSA's confidentiality, availability, and integrity.
  • Leverage feeds, incident reports, and threat briefs to assess relevance to SSA's environment and enhance the program's threat modeling capability.
  • Policy, SOP Development & Reporting

  • Prepare and present insider threat briefings to program leadership and executives, following agency writing and presentation standards.
  • Contribute to Insider Threat Work Status Reports with detailed analytics, visuals (charts / dashboards), and recommendations.
  • FOUNDATION FOR SUCCESS (Basic Qualifications)

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
  • Proven experience in cybersecurity, DLP - Trellix or Palo altos, or a related area.
  • Hands-on experience with Trellix Data Loss Prevention (DLP) for monitoring, detecting, and controlling sensitive data movement across endpoints, email, and network channels.
  • Good understanding of networking and firewall fundamentals , including how monitoring tools interact across segmented architectures.
  • Familiarity with Palo Alto Networks firewalls and their logging capabilities (useful for correlating user activity across layers).
  • Strong analytical and problem-solving skills; ability to make data-driven recommendations.
  • Excellent written and verbal communication skills, particularly in conveying technical insights to leadership.
  • Must be able to obtain and maintain a Public Trust. Contract requirement.
  • Selected candidate must be willing to work on-site in Woodlawn, MD 5 days a week.
  • FACTORS TO HELP YOU SHINE (Required Skills)

  • Experience in using Splunk ES or enterprise Splunk is a plus.
  • Ability to make decisions based upon analysis of documentation.
  • Experience with endpoint monitoring tools , SIEM / SOAR integrations , and identity-based risk scoring .
  • Working knowledge of DLP , EDR , or behavioral analytics platforms in support of insider threat detection.
  • Experience working in a classified environment and delivering briefings in SCIF settings.
  • Understanding of NIST 800-53 and related to Insider Threat Programs.
  • HOW TO STAND OUT FROM THE CROWD (Desired Skills)

    Showcase your knowledge of modern development through the following experience or skills :

  • Experience with federal regulatory requirements and compliance standards related to cybersecurity.
  • Knowledge of programing, Splunk automation, network and firewall operations.
  • Familiarity with security tools and technologies used for threat detection and analysis.
  • Security certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are a plus.
  • At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success. We empower our teams and contribute to our communities. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business. Every position we take is more rewarding when you know the why behind it. Know your work makes a difference to support those who need it most. If your passion is enabling life changing service to those around, you this is the place for you. Find your passion in a team environment where all members are valued regardless of contractor or employee status. We are excited for you to take your place in our Leidos Family.

    Are you an US citizen, US resident, or Visa candidate and think you might fit? We recommend you apply and start the conversation today! Join us in supporting our SSA contracts in Woodlawn, Maryland.

    If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

    Original Posting : November 25, 2025

    For U.S. Positions : While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

    Pay Range :

    Pay Range $85,150.00 - $153,925.00

    The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

    Create a job alert for this search

    Insider Threat Engineer • Baltimore, MD, United States

    Related jobs
    Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI

    Security Intelligence Engineer, Incident Response Threat Intelligence, ACTI

    Amazon • Annapolis Junction, MD, United States
    Full-time
    We are open to hiring candidates to work out of one of the following locations : .Annapolis Junction, MD, USA | Arlington, VA, USA | Austin, TX, USA | Herndon, VA, USA | New York, NY, USA | Seattle, ...Show more
    Last updated: 4 days ago • Promoted
    Cybersecurity SME - Network & Threat Detection

    Cybersecurity SME - Network & Threat Detection

    Indigo IT • Fort Meade, MD, United States
    Full-time
    Cybersecurity SME - Network & Threat Detection.Cybersecurity SME - Network & Threat Detection.Founded in 2001, Indigo IT is an award winning information technology consulting and services company.W...Show more
    Last updated: 4 days ago • Promoted
    Security Engineer - Baltimore, MD

    Security Engineer - Baltimore, MD

    Georgia IT Inc • Baltimore, MD, United States
    Full-time
    US Citizens, GC, EAD ( H4, L2), E3 TN visa holders preferred, NO third party corp to corp accepted for this job.Architect and Design IAM solutions based on ForgeRock suite of tools such as OpenAM, ...Show more
    Last updated: 30+ days ago • Promoted
    Information Systems Security Engineer (ISSE)

    Information Systems Security Engineer (ISSE)

    DUIT • Glen Burnie, MD, United States
    Full-time
    Join Our Winning Team as an Information Systems Security Engineer (ISSE).Davis Unlimited Information Technologies, Inc.DUIT) is seeking passionate and experienced Information Systems Security Engin...Show more
    Last updated: 4 days ago • Promoted
    Information Systems Security Engineer II

    Information Systems Security Engineer II

    Kavaliro • Fort Meade, MD, United States
    Permanent
    Information Systems Security Engineer Ii.Kavaliro is seeking an Information Systems Security Engineer II to support a client in Maryland. Participate as a security engineering representative on engi...Show more
    Last updated: 4 days ago • Promoted
    Regional Loss Prevention Agent

    Regional Loss Prevention Agent

    Redner's Markets • Baltimore, MD, US
    Full-time
    Regional Loss Prevention Agent.Job Category : Operations Group.Requisition Number : REGIO02416.Position Title : Regional Loss Prevention Agent. Reports To : Director of Security and Loss Prevention.Resp...Show more
    Last updated: 30+ days ago • Promoted
    Asset Protection Specialist

    Asset Protection Specialist

    Home Depot (Retail) • Baltimore, MD, US
    Full-time
    The Asset Protection Specialist is primarily responsible for preventing financial loss caused by theft and fraud and supporting safety and environmental program compliance in their assigned store / m...Show more
    Last updated: 30+ days ago • Promoted
    Information System Security Engineer (ISSE)-Intermediate

    Information System Security Engineer (ISSE)-Intermediate

    Quantech Services • Fort Meade, MD, United States
    Full-time
    Information System Security Engineer (ISSE)-Intermediate.Information Security Associate.Contract position State Location. Quantech Services is seeking an experienced Information System Security Engi...Show more
    Last updated: 30+ days ago • Promoted
    Information System Security Engineer (ISSE)

    Information System Security Engineer (ISSE)

    VTG Defense • Fort Meade, MD, United States
    Full-time
    VTG is looking for an Information System Security Engineer (ISSE)s in multiple locations.Note : position is contingent upon program award and the postions are located in Chantilly VA, Aurora CO, Spr...Show more
    Last updated: 4 days ago • Promoted
    2025 Cyber Security Engineer I - Hunt Valley, MD

    2025 Cyber Security Engineer I - Hunt Valley, MD

    Textron • Hunt Valley, MD, United States
    Full-time +1
    Cyber Security Engineer I - Hunt Valley, MD.Textron Systems serves defense and commercial customers with the combined expertise of its family of brands : Textron Systems, Howe & Howe, Lycoming and A...Show more
    Last updated: 4 days ago • Promoted
    Information Systems Security Engineer

    Information Systems Security Engineer

    Novul Solutions • Annapolis Junction, MD, United States
    Full-time
    We are currently seeking a Mid-Level Information System Security Engineer to join in supporting a critical mission in Annapolis Junction, MD. This role is essential in a program that delivers a broa...Show more
    Last updated: 4 days ago • Promoted
    Principal Cybersecurity Engineer- Architecture

    Principal Cybersecurity Engineer- Architecture

    OneMain Financial • Baltimore, MD, United States
    Part-time
    The Principal Cybersecurity Engineer is ideally based Baltimore, MD.Candidates may also be considered in Irving TX, Evansville IN, and Fort Mill SC. The Principal Cybersecurity Engineer will be resp...Show more
    Last updated: 18 days ago • Promoted
    Security Engineer

    Security Engineer

    HireCapital • Baltimore, MD, United States
    Full-time +1
    Direct message the job poster from HireCapital.Technical Recruiter placing talent at innovative and mission-driven organizations. Our client is a rapidly growing technology firm operating at the int...Show more
    Last updated: 30+ days ago • Promoted
    Cyberspace Intelligence Threat Analyst, Journeyman

    Cyberspace Intelligence Threat Analyst, Journeyman

    Leidos Inc • Odenton, MD, United States
    Full-time
    Looking for an opportunity to make an impact?.At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers' success.We empowe...Show more
    Last updated: 30+ days ago • Promoted
    Security Research Engineer

    Security Research Engineer

    Dark Wolf Solutions • Fort Meade, MD, United States
    Full-time
    Critical to this expertise will be the ability to conduct comprehensive technology research to evaluate potential vulnerabilities in cyberspace systems. This position requires full-time onsite work ...Show more
    Last updated: 30+ days ago • Promoted
    Cybersecurity Engineer (Johns Hopkins Public Safety)

    Cybersecurity Engineer (Johns Hopkins Public Safety)

    Johns Hopkins University • Baltimore, MD, United States
    Full-time
    Security Incident and Event Management (SIEM), Security Orchestration and Automated Response (SOAR), Network Access Control, and network security. Candidates must have a good understanding of firewa...Show more
    Last updated: 30+ days ago • Promoted
    Intune Engineer

    Intune Engineer

    TEKsystems • Fort Meade, MD, United States
    Full-time
    Years of Engineering Experience with Intune / MECM.Years of Engineering Experience inside of an enterprise level environment. Years of Experience working with automation tools.SECRET CLEARANCE OR A SE...Show more
    Last updated: 9 days ago • Promoted
    Integration Cyber Security Engineer - Principal

    Integration Cyber Security Engineer - Principal

    Amentum • Fort Meade, MD, United States
    Full-time
    Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further.Integration Cyber Security Engineer (IASE). In this role you will support challenging...Show more
    Last updated: 4 days ago • Promoted