Insider Threat Analyst

Provide analytical, program support services related to the operation of UAM/ UEBA tool. Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response. Conduct further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise. Provide proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior. Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior. Identify mitigation strategies to assist the investigative team in effectively reducing insider threat risk. Utilize UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours).

Analysis Skills, Analysis Skills, Top Secret Clearance, Sensitive Compartmented Information (SCI), Internet Security, Open Source, Customer Support/Service, Time Management, Homeland Security, Risk, Must have active TS/SCI clearance 12+ years of prior relevant insider threat experience 10+ years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations. 10+ years demonstrated knowledge of Threat Assessment & Mitigation Strategies. Working knowledge of User Activity Monitoring Software (UAM) and solutions. Working knowledge of Cybersecurity toolsets designed to support ITP mission activities. Working Knowledge of Open-Source toolsets. Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway. Bachelor’s Degree required