Insider Threat Analysts are responsible for collecting and assessing potential threats from within an organization, whether they’re from employees, business partners, or third-party vendors. They analyze these threats, identifying trends and patterns in threat data and finding any policy violations before disseminating and presenting their findings to key stakeholders.

Cyber Insider Threat Analysts are often familiar with risk scoring and threat analysis tools, user and entity behavior analytics, Data Loss Prevention (DLP) security controls, and SIEM tools. These professionals also need a deep understanding of the security tools used by the organization, including firewalls, antivirus solutions, and threat intelligence systems.