Description
The Digital Sector at Leidos currently has an opening for a Hunt Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP).
This is an exciting opportunity to use your experience to support, sustain, design and evolve the database backbone of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.
The selected candidate will be responsible for:
- Examining, analyzing, and searching insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
- Providing analytical, program support services related to the operation of UAM/UEBA tool.
- Monitoring UAM platform to identify emerging requirements related to insider threat events and coordinating across the enterprise to ensure timely response.
- Conducting further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise.
- Providing proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
- Conducting continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
- Identifying mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
- Utilizing UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations.
- Providing timely response to critical/high UAM alerts (within 4 hours during normal business hours).
Basic Qualifications:
- Bachelor's degree and 4-8 years of prior relevant insider threat experience or relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree.
- Minimum of 4 years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
- Minimum of 4 years demonstrated knowledge of Threat Assessment & Mitigation Strategies.
- Excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.
- Knowledge of current domestic and international threats to U.S. national security interests.
- Ability to establish networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
- Self-starter capable of working independently to promote program goals.
- Working knowledge of User Activity Monitoring Software (UAM) and solutions.
- Working knowledge of Cybersecurity toolsets designed to support ITP mission activities.
- Working Knowledge of Open-Source toolsets.
- Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway.
- Current TS/SCI and Must be a US Citizen.
- Ability to obtain DHS EOD SCI and willingness to undergo CI Polygraph.
Preferred Qualifications:
- Master's degree from an accredited college or university in Criminal Justice, Homeland security, Cyber Security, or related field.
- Proven experience (4+ years) in Intelligence Analysis.
- Experience with User Activity Monitoring products and platforms.
- Proven experience (4+ years) in Threat Assessment & Mitigation.
- Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F).
- Certified Counter-Insider Threat Professional - Analysis (CCITP-A).
- Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC).
- Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop.
- Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU.
Pay Range: $87,100.00 - $157,450.00