Job Information: - Job Title: Insider Threat Program Hunt Team Analyst. - Job ID: CFG_173. - Client: DHS HQ. - Location: On-Site – TSA Headquarters, Springfield, VA. - Employment Type: Full-Time – W2 only. - Clearance Required: TS/SCI with willingness to undergo CI Polygraph. Position Summary: - We are seeking a Hunt Team Analyst to support the DHS Insider Threat Program (ITP) under the HEITS contract. - In this role, you will leverage advanced threat-hunting techniques, analytics, and data correlation to identify potential insider threats and strengthen the security posture of DHS. - This is an opportunity to contribute directly to a high-visibility mission focused on protecting national security interests. Work Schedule: - Normal business hours will be defined as a schedule combination to include weekdays 2pm-10pm shift and weekends 6am-6pm shift. - The candidate will have 2-3 days off based on the schedule determined. - The work week should not exceed 40 hours. - This position is expected to eventually move to shift work to meet the requirement of 24x7 operations at an undetermined later date. - Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators. Responsibilities: - Provide analytical, program support services related to the operation of UAM/ UEBA tool. - Monitor UAM platform to identify emerging requirements related to insider threat events. - Coordinate across the enterprise to ensure timely response. - Conduct further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise. - Provide proactive insider threat-based hunting across the DHS enterprise network. - Leverage methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior. - Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior. - Identify mitigation strategies to assist the investigative team in effectively reducing insider threat risk. - Utilize UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. - Provide timely response to critical/high UAM alerts within 4 hours during normal business hours. Required Qualifications: - Bachelor’s degree and 12+ years of prior relevant insider threat experience or Masters with 10+ years of prior relevant experience. - Additional years of experience with requisite certifications will be considered in lieu of degree. - Minimum of 10+ years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations. - Minimum of 10+ years demonstrated knowledge of Threat Assessment & Mitigation Strategies. - Excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences. - Possess knowledge of current domestic and international threats to U.S. national security interests. - Adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization. - Self-starter capable of working independently to promote program goals. - Working knowledge of User Activity Monitoring Software (UAM) and solutions. - Working knowledge of Cybersecurity toolsets designed to support ITP mission activities. - Working Knowledge of Open-Source toolsets. - Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway. - Current TS/SCI. - Must be a US Citizen. - Willingness to undergo CI Polygraph. Preferred Qualifications: - Master’s degree from an accredited college or university in Criminal Justice, Homeland security, Cyber Security, or related field. - Proven experience (10+ years) in Intelligence Analysis. - Experience with User Activity Monitoring products and platforms. - Proven experience (4+ years) in Threat Assessment & Mitigation. - Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F). - Certified Counter-Insider Threat Professional - Analysis (CCITP-A). - Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC). - Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop. - Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU.

UAM Tool Engineer

Emma

Responsibilities

Skills wanted:

Language(s) required:

Srivamsi Magapu

About metasoftinc:

mission:

www.metasoftinc.com/

Admin access needed

Admin access needed