Insider Threat Program Hunt Team Analyst

M9 Solutions is seeking an Insider Threat Program Hunt Team Analyst to work on-site in support of a government contract for a client located in Springfield, VA. An active TS/SCI clearance with the ability to obtain CI poly is required.

Responsibilities

• Examines, analyzes, and searches insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
• Provides analytical and program support services related to the operation of UAM/UEBA tools. Monitors the UAM platform to identify emerging requirements related to insider threat events and coordinates across the enterprise to ensure timely response.
• Conducts further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the enterprise.
• Provides proactive insider threat-based hunting across the enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
• Conducts continuous hunt operations across data and log sources, enterprise platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
• Identifies mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
• Utilizes UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provides timely response to critical/high UAM alerts.

Required Skills and Qualifications

• TS/SCI security clearance with the ability to obtain a CI poly.
• Bachelor's degree and 12+ years of prior relevant insider threat experience, or master's degree with 10+ years of prior relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree.
• U.S. citizenship is required for this role.
• 10+ years of demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
• 10+ years of demonstrated knowledge of Threat Assessment and Mitigation Strategies.
• Possesses excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
• Possesses knowledge of current domestic and international threats to U.S. national security interests.
• Demonstrates ability to establish networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
• Self-starter capable of working independently to promote program goals.
• Working knowledge of User Activity Monitoring (UAM) software and solutions.
• Working knowledge of cybersecurity toolsets designed to support insider threat program mission activities.
• Working knowledge of open-source toolsets.
• Working knowledge of Insider Threat Frameworks, including Pathway to Violence and Critical Pathway.

Preferred Skills and Qualifications

• Master's degree from an accredited college or university in Criminal Justice, Homeland Security, Cyber Security, or related field.
• 10+ years of proven experience in Intelligence Analysis.
• Experience with User Activity Monitoring products and platforms.
• 4+ years of proven experience in Threat Assessment and Mitigation.
• Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F).
• Certified Counter-Insider Threat Professional - Analysis (CCITP-A).
• Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC).
• Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop.
• Completion of Center for Development of Security Excellence (CDSE) Curriculums: INT311.CU, INT312.CU, CI201.CU.