Cyber Insider Threat Analyst (Remote)

Date Posted:

2025-10-15

Country:

United States of America

Location:

UTDC1: UT-DC-Remote UT Remote DC , Washington, DC, 20024 USA

Position Role Type:

Remote

U.S. Citizen, U.S. Person, or Immigration Status Requirements:

U.S. citizenship is required, as only U.S. citizens are authorized to access information under this program/contract.

Security Clearance:

None/Not Required

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.

The following position is to join our RTX Enterprise Services team:

Role Overview: 

Enterprise Services (ES) Cybersecurity has an immediate opening for a qualified insider threat analyst to join RTX Cyber Defense reporting to the Associate Director of Cyber Insider Threat Operations. As an insider threat analyst, you will be responsible for supporting the analysis, monitoring and triage of alerts stemming from potential insider threats.

What You Will Do:

• Perform log analysis to detect anomalies, leveraging expertise in security operations tools to monitor and safeguard sensitive data. Utilize behavioral analytics and endpoint security solutions to identify and investigate unusual patterns.
• Monitor potential data exfiltration points using data loss prevention tools and other security solutions to detect and prevent unauthorized transfers.
• Apply Open-Source Intelligence (OSINT) techniques to gather and analyze publicly available information related to insider threats.
• Identify insider threat trends and patterns to assist content teams in the development of new detection rules and models.
• Articulate the implications of the risks relative to insider threats and educate team members, peers and stakeholders on the potential impacts.
• Review data, alerts and behaviors to identify potential concerns from multiple angles, gather information and understand and articulate information gaps needed to inform decisions.
• Work independently and with teams to define and complete analysis activities.
• Document findings in a manner that technical and non-technical stakeholders understand and can articulate findings to leadership and peers.
• Perform initial analysis on data from systems to identify unexpected or malicious activity across channels while understanding how activity fits into the threat landscape.
• Assist in building processes, procedures and training for the insider threat team.
• Collaborate with stakeholders to provide suggestions and feedback for validation and improvement of various tools, models, and processes.
• Stay updated on the latest developments and trends in insider threats, emerging and/or advanced persistent attack vectors, and industry best practices, incorporating this knowledge into RTX’s defense strategies.
• Perform other duties as assigned and as required to continuously drive process excellence.

Qualifications You Must Have:

• Typically requires a University Degree or equivalent experience and a minimum 5 years of experience, or an Advanced Degree and a minimum 3 year’s experience.
• Minimum 5 years supporting a cyber insider threat program and/or a cyber incident response team, including at least 3 years with cybersecurity tools and technologies used to detect and mitigate insider threats, including, but not limited to security information and event monitoring (SIEM), user entity and behavior analytics (UEBA), user activity monitoring (UAM), data loss prevention (DLP) technologies and endpoint security solutions.
• Must be able to effectively communicate (verbal and written) technical and strategic details to peers, leadership, and stakeholders with varying levels of operational expertise.
• The ability to obtain and maintain a U.S. government issued security clearance is required. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer:

• Insider Threat specific training/certifications such as CERT Insider Threat course work or Center for Development of Security Excellence (CDSE).
• Industry certifications in information security o