diff --git a/x-pack/plugins/security_solution/server/lib/entity_analytics/risk_score/calculate_risk_scores.ts b/x-pack/plugins/security_solution/server/lib/entity_analytics/risk_score/calculate_risk_scores.ts
index 4db1ef0317252..00e6f582367b1 100644
--- a/x-pack/plugins/security_solution/server/lib/entity_analytics/risk_score/calculate_risk_scores.ts
+++ b/x-pack/plugins/security_solution/server/lib/entity_analytics/risk_score/calculate_risk_scores.ts
@@ -327,7 +327,7 @@ export const calculateRiskScores = async ({
             },
           },
           field_value_factor: {
-            field: 'kibana.alert.risk_score', // sort by risk score
+            field: ALERT_RISK_SCORE, // sort by risk score
           },
         },
       },