Insider Threat Program Data Analyst

The Digital Modernization Sector at Leidos currently has an opening for a Data Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP).

The selected candidate will be responsible for the following:

• Deliver comprehensive data analysis, review, and investigative support to the DHS Insider Threat Program (ITP) within the ITOC, ensuring effective detection of potential threats and anomalous behavior across the enterprise.

• Examine, analyze, and search insider threat data to identify patterns, trends, and indicators associated with potential malicious activity or compromised behavior.

• Develop and produce actionable analytics to support the Department of Homeland Security (DHS) in identifying individuals exhibiting harmful behavior toward themselves or the organization.

• Assess compromise vectors and behavioral indicators; extrapolate findings to identify similarly affected individuals across the enterprise.

• Provide technical strategies for threat containment and eradication of advanced insider threats.

• Collaborate with Government personnel to create advanced correlation rules and triggers within the Enterprise User Activity Monitoring (UAM) platform.

• Provide a timely response to critical/high UAM alerts (within 4 hours during normal business hours and provide after-hour support). Normal business hours will be defined as 6am to 10pm Monday – Friday excluding weekends and scheduled holidays.  Implement corrective actions to restore normal operations and prevent recurrence. Be available for on- call after-hours support as needed to the Analyst teams.

Basic Qualifications:

• Bachelor’s degree in Data Analytics, Computer Science, Information Technology, Statistics, Cyber Security, or related field and (12)+ years of prior relevant data science experience or Masters with (10)+ years of prior relevant experience.

• Minimum of 8 years demonstrated knowledge of proficiency in statistical analysis, data mining, and predictive modeling.

• Minimum of 8 years demonstrated knowledge of the intelligence cycle, processes, and organizations.

• Minimum of 8 years demonstrated experience creating advanced correlation rules and triggers within the Enterprise User Activity Monitoring (UAM) platform.

• Familiarity with tools for data manipulation and analysis.

• Experience with visualization tools to create dashboards and reports.

• Understanding of cybersecurity principles including insider threat detection, network security, and data protection.

• Experience with user and entity behavior analytics (UEBA) tools or platforms.

• Strong SQL skills for querying databases and extracting relevant data.

• Ability to apply statistical methods to identify patterns, anomalies, or trends in data.

• Familiarity with machine learning for predictive modeling.

• Understanding of insider threat indicators, such as unauthorized access, data exfiltration, or policy violations.

• Have excellent written and verbal skills with the ability to deliver briefings to technical and non-technical stakeholders, including Security, Counterintelligence and HR.

• Possess knowledge of current domestic and international threats to U.S. national security interests.

• Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization.

• Be a self-starter capable of working independently to promote program goals.

• Advanced knowledge of User Activity Monitoring products and platforms.

• Advanced knowledge of Cybersecurity toolsets designed to support ITP mission activities.

• Current TS/SCI and Must be a US Citizen.

• Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph.

Preferred Qualifications:

• Master’s degree from an accredited college or university in Computer Science, Information Technology, Statistics, or related field 

• Proven experience (10+ years) in Behavioral Analytics

• Experience with User Activity Monitoring products and platforms

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

September 18, 2025

For U.S. Positions: While subject