Insider Threat Analyst with Security Clearance
Apply NowCompany: TEKsystems c/o Allegis Group
Location: Alexandria, VA 22350
Description:
SHIFT: 10 AM - 6 PM POSITION SUMMARY:
This position will serve as a member of Joint Service Provider (JSP) User Activity Monitoring (UAM) Team. UAM analysts triage, analyze, and assess alerts and document and report findings through a case management system. Information is further shared with impacted parties for follow-on analysis. The UAM team continually deploys, maintains, and tunes countermeasures in response to new or changing insider threat tactics, techniques, and procedures (TTPs). The UAM team also provides information to the UAM Lead to fulfill JSP trending and reporting requirements. PRIMARY RESPONSIBILITIES:
Triage and analyze UAM alerts
Document and report findings to impacted organizations
Provide information to the UAM lead for customer trending and reporting
Create and implement countermeasures to specific weaknesses against known adversarial TTPs
Support meetings where UAM representation is needed
Provide recommendations to contractor and government leadership on ways to improve the UAM program BASIC QUALIFICATIONS:
Must have active Top Secret/SCI.
IAT Level II Certifed
Bachelor's degree and 8+ years of professional experience; additional related years of experience is accepted in lieu of a degree
At least 1 year of incident response experience
At least 6 months of UAM or insider threat detection experience
Demonstrated experience with UAM capabilities and common insider threat TTPs.
Demonstrated knowledge of network traffic and communications, including known ports and services.
Demonstrated experience in coordinating with external organizations, especially Law Enforcement and Counter Intelligence
Knowledge of incident handling procedures. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret) Because an active or interim DoD clearance is required, U.S. Citizenship is required
This position will serve as a member of Joint Service Provider (JSP) User Activity Monitoring (UAM) Team. UAM analysts triage, analyze, and assess alerts and document and report findings through a case management system. Information is further shared with impacted parties for follow-on analysis. The UAM team continually deploys, maintains, and tunes countermeasures in response to new or changing insider threat tactics, techniques, and procedures (TTPs). The UAM team also provides information to the UAM Lead to fulfill JSP trending and reporting requirements. PRIMARY RESPONSIBILITIES:
Triage and analyze UAM alerts
Document and report findings to impacted organizations
Provide information to the UAM lead for customer trending and reporting
Create and implement countermeasures to specific weaknesses against known adversarial TTPs
Support meetings where UAM representation is needed
Provide recommendations to contractor and government leadership on ways to improve the UAM program BASIC QUALIFICATIONS:
Must have active Top Secret/SCI.
IAT Level II Certifed
Bachelor's degree and 8+ years of professional experience; additional related years of experience is accepted in lieu of a degree
At least 1 year of incident response experience
At least 6 months of UAM or insider threat detection experience
Demonstrated experience with UAM capabilities and common insider threat TTPs.
Demonstrated knowledge of network traffic and communications, including known ports and services.
Demonstrated experience in coordinating with external organizations, especially Law Enforcement and Counter Intelligence
Knowledge of incident handling procedures. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret) Because an active or interim DoD clearance is required, U.S. Citizenship is required