Insider Threat Cyber Analyst (Mid/Senior)

Duties: Serve as a Senior Cyber Technical Analyst; specific duties and functions include, but are not limited to, the following:

Possess the ability to leverage technical knowledge and methods to identify and monitor cyber activities to respond to urgent CI mission requirements.

Provide integrated cyber-technical analytic expertise in support of Counterintelligence missions.

Support CI programs in development of policies and procedures, as well as program development and oversight, related to the CI-cyber mission

Conduct complex cyber analytical activities, evaluation of information/technical/physical security systems and practices, CI-cyber investigations, and related duties.

Identify, investigate and analyze complex events of cyber significance.

Assist in the development and application of advanced tools for applying cyber security and analysis practices to the CI-cyber mission. Perform all-source intelligence analysis to determine and report on characteristics of various systems/issues and other project/program objectives.

Collect data, analyze results, and prepare reports relating to project/program objectives.

Establish liaison contacts with program offices and USIC and law enforcement agencies to ensure effective and efficient collaboration of complex cyber-related CI issues.

Provide time-sensitive mission support to identify, understand, pursue and mitigate advanced persistent cyber threats and anomalous cyber behaviors on stakeholder networks.

Maintain competencies on technology, tools, and cyber technical tradecraft to achieve CI-cyber mission objectives.

Primary focus of this role is log analysis and identification of anomalous activity. Does not entail direct monitoring and interpretation of user behavior. Experience with SPLUNK is highly relevant. All source analysis, writing comprehensive reports, and delivering briefings is required.

Individual must have a minimum ten (10) years’ experience in technical cyber analysis. Advanced experience in understanding and detection of foreign intelligence activity or malicious insider activity in the cyber domain and demonstrated ability to correlate CNO tactics, techniques, and procedures to known or suspected cyber threat actors. Experience in complex cyber investigations and use of the latest and most advanced cyber forensics-analysis tools, multi-source intelligence analysis, knowledgeable of USIC activities is required. Must be capable of conducting independent research, as well as work with team members and partner agencies. Must have experience dealing with complex cyber-based investigations and national security matters. Must possess excellent verbal and written communications skills and have experience in conducting cyber interviews and defensive briefings and debriefings.

(U) Education: A Bachelor’s degree from an accredited college or university is required, preferably in Computer Science, Information Systems, or a related field. An advanced degree is preferred. This requirement may be waived if the individual has demonstrated experience in the information technology and/or cyber security fields.