Drimva

Anduril

Senior Insider Threat Analyst

$166K–$220K

Reston, Virginia, United States · Senior · Full-time · Posted Jun 29, 2026

Experience
Bachelor’s degree plus 5+ years of security analyst experience, or 7+ years without a degree (listed under preferred qualifications).
Education
Bachelor’s degree in Information Systems, Information Security, Cyber Security, Computer Science, or Computer Engineering; or 7+ years of security analyst experience without a degree.

About the job

Protects Anduril Intelligence Systems from insider threats by investigating suspicious activity, improving security controls, and supporting incident response.

What you'll do

  • Identify, triage, investigate, and remediate insider-threat detections; own investigations end to end.
  • Evaluate and implement controls, conduct threat hunting, and produce incident-response dashboards and metrics.
  • Communicate security concerns to non-technical audiences and build relationships across the AIS business line.

What they ask for

  • Knowledge of modern adversary tradecraft and mitigating controls; experience in insider threat investigations, digital forensics, and incident response.
  • Ability to analyze large datasets across systems and experience with EDR tools, DLP, and other telemetry sources.
  • Strong analytical skills, discretion with sensitive investigations, and ability to work autonomously and own complex projects.
  • Currently possesses and can maintain an active U.S. Top Secret SCI security clearance.

Nice to have

  • Production experience with a general-purpose language such as Python or Go, and familiarity with infrastructure-as-code languages such as Terraform or AWS CDK.
  • Experience building controls for export-controlled information or CUI; understanding of counterintelligence concepts.

Pay

$166,000 — $220,000 USD (base salary)

Tools

SIEM, data lake, Endpoint Detection and Response (EDR), Data Loss Prevention (DLP), Python, Go, Terraform, AWS CDK

Model-written summary · the original posting is authoritative

First seen Oct 10, 2026 · Last verified Nov 5, 2026 (UTC)