Insider Threat Analyst

Come join our team! Mobius is seeking an Insider Threat HUB Analyst. This position is for an Insider Threat HUB Analyst. Hub Analysts study, analyze, advise, research and develop deliverables to advance the detection, deterrence and mitigation of insider threat activity in the Department of the Navy (DoN), while safeguarding National Security, service information and data on both Navy and civilian contractor’s information systems through the application of knowledge and resources in achieving the Navy’s mission requirements defined herein. The OPNAV Insider Threat Hub possesses an integrated capability to monitor, audit, fuse, and analyze incoming information for insider threat detection and mitigation. Hub personnel analyze information and activity indicative of an insider risk and refer that data to the appropriate officials for investigation and/or resolution.

Duties of Insider Threat Analyst may include:

• Perform in one or more of the following areas: cyber threat analysis, incident response, intrusion detection, network/computer forensics, data loss prevention technologies, enterprise audit analysis, and/or automated Audit/Anomaly Threat Detection technology.
• Assist in the development, implementation, and management of Insider Threat/cybersecurity collection, detection, deterrence, analysis, and mitigation.
• Conduct information technology audits, incident responses, and/or network monitoring at the Enterprise level, to include the use of security tools to conduct such work.
• Assist in generating analysis reports and briefing other team members and/or senior management on analytical findings as well as support the development of Tactics, Techniques, and Procedures (TTPs)
• Receive automated user activity monitoring/audit data and alerts from sensors deployed on Navy’s classified and unclassified SCI networks from the UAM Team and include those findings “if any” in their analytical report and/or Insider Threat Risk Assessment (ITRA).
• Provide the Government, tracking metrics captured on a daily, weekly, and monthly basis: Cases worked, closed, and current open cases that should reflect the analyst duties and workload. Metrics also include Insider Threat Risk Assessments written, submissions into the Navy’s case management system, and the DoD Insider Threat Management Analysis Center System of Systems (DITMAC DSOS).
• Perform analysis and assessments to the Government and assist the Government in resolving identified discrepancies in an attempt to detect, deter, and mitigate a potential Insider Threats.
• Assist with the facilitation of testing new/existing software for the purpose of case management, data set review, and/or the development of Hub related policies.
• Evaluate existing Hub related policies, modify policies where needed to achieve program objectives, and/or develop new policies as necessary.

Qualifications:

• Must have a minimum of 1-years’ experience working in/with a Counter-Insider Threat Program.
• Possess a Certified Certificate Insider Threat Professional – Fundamentals/Analyst (CCITP-F/A) certification (Must be obtained within the first 6 months after start.) Security + certification. Certified Information Systems Security Professional (CISSP) certification.

Clearance

• TS/SCI. The highest level of security required for this requirement is TOP SECRET/SCI and SI/TK/G/HCS//as necessary to work within a SCIF. Access to the Joint World-Wide Intelligence Communication System (JWICS) is required.

As a Contractor for the Navy Insider Threat Program successful candidates are subject to Navy Insider Threat Random Polygraphs.