Active TS/SCI clearance with ability to obtain CI poly.
Bachelor's degree with 12+ years of insider threat experience, or Master's with 10+ years; additional experience may substitute for degree.
U.S. citizenship required.
10+ years of knowledge in intelligence cycle and analytic techniques.
10+ years of experience in Threat Assessment and Mitigation Strategies.
Excellent written and verbal communication skills for diverse audiences.
Knowledge of current domestic and international threats to U.S. national security.
Responsibilities
Examine and analyze insider threat data to identify trends and potential indicators.
Provide analytical support for UAM/UEBA tools and monitor for emerging insider threat requirements.
Conduct research on UAM platform to identify concerning behavior patterns.
Proactively hunt for insider threats across the enterprise network using behavioral analytics.
Conduct continuous operations across data sources to identify insider threat behavior patterns.
Identify mitigation strategies to assist investigative teams in reducing insider threat risk.
Utilize UEBA platforms to baseline user activity and respond to critical alerts.
Benefits
Comprehensive health insurance options.
Retirement savings plan with company match.
Professional development and training opportunities.
Flexible work arrangements.
Paid time off and holidays.
Full Job Description
Insider Threat Program Hunt Team Analyst to work on-site in support of a government contract for a client located in Springfield, VA. An active TS/SCI clearance with the ability to obtain CI poly is required.
Responsibilities
Examines, analyzes, and searches insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
Provides analytical and program support services related to the operation of UAM/UEBA tools. Monitors the UAM platform to identify emerging requirements related to insider threat events and coordinates across the enterprise to ensure timely response.
Conducts further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the enterprise.
Provides proactive insider threat-based hunting across the enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
Conducts continuous hunt operations across data and log sources, enterprise platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
Identifies mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
Utilizes UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provides timely response to critical/high UAM alerts.
Required Skills and Qualifications
TS/SCI security clearance with the ability to obtain a CI poly.
Bachelor's degree and 12+ years of prior relevant insider threat experience, or master's degree with 10+ years of prior relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree.
U.S. citizenship is required for this role.
10+ years of demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
10+ years of demonstrated knowledge of Threat Assessment and Mitigation Strategies.
Possesses excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
Possesses knowledge of current domestic and international threats to U.S. national security interests.
Demonstrates ability to establish networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
Self-starter capable of working independently to promote program goals.
Working knowledge of User Activity Monitoring (UAM) software and solutions.
Working knowledge of cybersecurity toolsets designed to support insider threat program mission activities.
Working knowledge of open-source toolsets.
Working knowledge of Insider Threat Frameworks, including Pathway to Violence and Critical Pathway.
Preferred Skills and Qualifications
Master's degree from an accredited college or university in Criminal Justice, Homeland Security, Cyber Security, or related field.
10+ years of proven experience in Intelligence Analysis.
Experience with User Activity Monitoring products and platforms.
4+ years of proven experience in Threat Assessment and Mitigation.
Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F).
Certified Counter-Insider Threat Professional - Analysis (CCITP-A).
Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC).
Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop.
Completion of Center for Development of Security Excellence (CDSE) Curriculums: INT311.CU, INT312.CU, CI201.CU.
Full-Time Employee Compensation
M9 Solutions' pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.
M9 Solutions is an IT consulting and staffing firm that provides services to clients in a variety of industries, including healthcare, finance, and government. The company offers a range of services, including project management, software development, and data analytics. M9 Solutions was founded in 2010 and is headquartered in Durham, North Carolina.
