Insider Threat Monitoring Lead (CBP) (Cybersecurity)

Location: Ashburn, Virginia, United States — Hybrid. U.S. Citizenship required. Rare travel may be required.

Company

hirify.global supports national security and critical civilian missions through cybersecurity, technology integration, and adaptive solutions.

What you will do

• Lead insider threat monitoring, analysis, and escalation for sensitive federal systems.
• Identify meaningful patterns such as unusual access, data movement, and behavior changes while minimizing false positives.
• Coordinate cases with the Security Operations Center Manager, human resources, security partners, incident response, and digital forensics.
• Ensure escalated cases are documented clearly and transferred promptly when they become investigations or incident response matters.
• Tune detection logic using real case outcomes, near misses, and lessons learned.
• Communicate sensitive findings and systemic gaps to stakeholders while maintaining privacy and proportionality.

Requirements

• U.S. Citizenship is required.
• Experience running or serving as a senior analyst in an insider threat program, preferably in a federal or cleared environment.
• Experience handling cases involving HR, legal, or security coordination and applying proportionality principles.
• Experience tuning detection logic based on real case outcomes.
• Understanding of privacy and legal boundaries related to human behavior data and technical monitoring.
• An active CBP Background Investigation, DHS fitness determination, or active DoD clearance is preferred and can shorten the start date; candidates without one may begin CBP BI processing.

Culture & Benefits

• Health, life, short- and long-term disability insurance, paid time off, and holiday pay.
• Retirement benefits and learning and development opportunities.
• Collaborative culture guided by the values of being happy, helpful, honest, humble, hungry, and driven.
• A $10,000 signing bonus is available to candidates with an active CBP BI and is payable after 90 days under standard terms.