Insider Threat Monitoring Lead (CBP)

Agile Defense
United States
Workplace: HybridFull timeFunction: Administration & Executive AssistanceSkills: ["Privacy-minded","Proportionality","Stakeholder coordination","Communication","Risk judgment"]

Lead insider threat monitoring for U.S. Customs and Border Protection, building and running the monitoring, analysis, and escalation workflow that catches early misuse without drowning in alerts. Partner with the Security Operations Center Manager, HR/security teams, and incident response and digital forensics leads to ensure cases transition cleanly and are handled proportionally, consistently, and with privacy and proportionality safeguards.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Agile Defense
Agile Defense
5 days ago

Insider Threat Monitoring Lead (CBP)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 20 hours agoStatus: Live

Job Summary

Lead insider threat monitoring for U.S. Customs and Border Protection, building and running the monitoring, analysis, and escalation workflow that catches early misuse without drowning in alerts. Partner with the Security Operations Center Manager, HR/security teams, and incident response and digital forensics leads to ensure cases transition cleanly and are handled proportionally, consistently, and with privacy and proportionality safeguards.
Location: United States
Workplace: Hybrid
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Build and run the monitoring, analysis, and escalation process to catch insider risk early.
  • •Work with the Security Operations Center Manager, HR, and security partners; coordinate with incident response and digital forensics leads when cases move from monitoring to action.
  • •Ensure alerts escalate only when warranted, reducing noise and identifying meaningful patterns such as unusual access, data movement, or behavior change.
  • •Run the program fairly and consistently by keeping monitoring proportional, closing non-substantiated cases cleanly, and avoiding lingering questions.
  • •Improve detection logic over time using real case outcomes and lessons learned, and hand off cases with complete records for next teams to act on immediately.
Travel: Low travel

Pay and Benefits

Perks:Health InsuranceLife InsurancePaid LeaveDisabilityRetirement

Key Requirements

  • •Hold an active CBP BI (CBP Background Investigation) and EOD strongly preferred, or be able to begin processing a CBP BI.
  • •Have run or been a senior analyst in an insider threat program, ideally in a federal or cleared environment aligned to NITTF standards or equivalent.
  • •Have tuned detection logic based on real case outcomes rather than leaving it as originally configured.
  • •Be able to coordinate case handling with HR, legal, and/or security partners while keeping reviews proportional.
  • •Understand privacy and legal boundaries around human behavior data and communicate sensitive findings without oversharing.
Experience:Insider threatFederalCleared environment
Skills:Privacy-mindedProportionalityStakeholder coordinationCommunicationRisk judgment

Eligibility

Nationality:US National
Security Clearance:Active CBP Background Investigation (CBP BI)EOD

Company Brief

Agile Defense
Provides cybersecurity services including managed detection and response, incident response, vulnerability assessments, and security operations to help organizations detect, respond to, and remediate cyber threats while meeting regulatory and compliance requirements.
Industry: Cybersecurity
Website