Insider Threat Program Hunt Team Analyst

M9 Solutions
Springfield +1 more
On-site

Who this role is best for

Experienced intelligence analysts with insider threat expertise and UAM/UEBA tool knowledge will find this on-site role in Springfield, VA, suitable for long-term commitment and collaboration with enterprise stakeholders.

Best fit for

  • Candidates with 10+ years in intelligence analysis and insider threat risk mitigation
    — “10+ years of demonstrated knowledge of the intelligence cycle, analytic techniques”
  • Professionals skilled in leveraging behavioral analytics and UAM platforms for threat detection
    — “Utilizes UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity”
  • Individuals with strong stakeholder engagement skills and a background in security frameworks
    — “Demonstrates ability to establish networks with relevant security, personnel, and prevention stakeholders”

Things to consider

  • TS/SCI clearance and potential for CI polygraph are mandatory requirements
    — “An active TS/SCI clearance with the ability to obtain CI poly is required.”
  • U.S. citizenship is a non-negotiable prerequisite for this role
    — “U.S. citizenship is required for this role.”

How to stand out

  • Highlight insider threat frameworks like Pathway to Violence in your resume and interview responses
    — “Working knowledge of Insider Threat Frameworks, including Pathway to Violence and Critical Pathway.”
  • Emphasize your ability to detect and mitigate insider threat behavior through behavioral analytics
    — “Provides proactive insider threat-based hunting across the enterprise network, leveraging methodologies and behavioral analytics”
  • Demonstrate experience with UAM/UEBA tools and their integration into threat detection workflows
    — “Provides analytical and program support services related to the operation of UAM/UEBA tools.”
  • Showcase your ability to brief diverse audiences on complex insider threat findings
    — “Possesses excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.”
  • Include certifications like CCITP-F or CCITP-A if applicable to strengthen your application
    — “Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F).”
Pace · SteadyCollaboration · HighAutonomy · HighDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • Identify insider threat indicators
  • Provide analytical support
  • Conduct continuous hunt operations
Typical background
10+ years of insider threat experienceTS/SCI security clearance

Skills & requirements

Required

Insider Threat AnalysisUam/ueba ToolsCybersecurityBehavioral AnalyticsMitigation Strategies

Preferred

Open-source Toolsets

Stack & domain

Insider Threat AnalysisUam/ueba ToolsCybersecurityEDR ToolsNetwork Traffic AnalysisBehavioral AnalyticsMitigation StrategiesIntelligence CycleAnalytic TechniquesThreat AssessmentOpen-source ToolsetsInsider Threat FrameworksProblem-solvingCommunicationTeamworkNetworkingInsider Threat

About the role

Original posting from M9 Solutions via Greenhouse

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting.

M9 Solutions is seeking an Insider Threat Program Hunt Team Analyst to work on-site in support of a government contract for a client located in Springfield, VA. An active TS/SCI clearance with the ability to obtain CI poly is required.

Responsibilities

Examines, analyzes, and searches insider threat data to identify trends, patterns, and insights of potential insider threat indicators.

Provides analytical and program support services related to the operation of UAM/UEBA tools. Monitors the UAM platform to identify emerging requirements related to insider threat events and coordinates across the enterprise to ensure timely response.

Conducts further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the enterprise.

Provides proactive insider threat-based hunting across the enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.

Conducts continuous hunt operations across data and log sources, enterprise platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.

Identifies mitigation strategies to assist the investigative team in effectively reducing insider threat risk.

Utilizes UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provides timely response to critical/high UAM alerts.

Required Skills and Qualifications

TS/SCI security clearance with the ability to obtain a CI poly.

Bachelor's degree and 12+ years of prior relevant insider threat experience, or master's degree with 10+ years of prior relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree.

U.S. citizenship is required for this role.

10+ years of demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.

10+ years of demonstrated knowledge of Threat Assessment and Mitigation Strategies.

Possesses excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.

Possesses knowledge of current domestic and international threats to U.S. national security interests.

Demonstrates ability to establish networks with relevant security, personnel, and prevention stakeholders to foster program utilization.

Self-starter capable of working independently to promote program goals.

Working knowledge of User Activity Monitoring (UAM) software and solutions.

Working knowledge of cybersecurity toolsets designed to support insider threat program mission activities.

Working knowledge of open-source toolsets.

Working knowledge of Insider Threat Frameworks, including Pathway to Violence and Critical Pathway.

Preferred Skills and Qualifications

Master's degree from an accredited college or university in Criminal Justice, Homeland Security, Cyber Security, or related field.

10+ years of proven experience in Intelligence Analysis.

Experience with User Activity Monitoring products and platforms.

4+ years of proven experience in Threat Assessment and Mitigation.

Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F).

Certified Counter-Insider Threat Professional - Analysis (CCITP-A).

Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC).

Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop.

Completion of Center for Development of Security Excellence (CDSE) Curriculums: INT311.CU, INT312.CU, CI201.CU.

Full-Time Employee Compensation

M9 Solutions’ pay range for this position is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include, but are not limited to, responsibilities of the position, education, experience, knowledge, skills, abilities, as well as internal equity, location, alignment with market data, applicable bargaining agreement (if any), or other law.

M9 Benefits - https://m9solutions.com/why-join-m9/#our-benefits

Salary Range$60,000—$180,000 USDM9 Solutions, LLC (M9) is a Federal subcontractor and complies with all applicable federal laws prohibiting discrimination in employment, including Title VII of the Civil Rights Act of 1964 and the Americans with Disabilities Act (ADA). M9 also adheres to the affirmative action requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA), ensuring equal opportunity for protected veterans. If you wish to voluntarily share that you are an individual with a disability, you are welcome to do so at any point in the application or employment process; M9 does not require this information, and it will not affect your candidacy. If you need accommodation during the application process or encounter difficulties using our website, please contact our Human Resources Department at hr@m9solutions.com or 703-936-0880.

M9 Solutions is a proud participant in the Virginia Values Veterans (V3) program and supports the Military Medics and Corpsmen (MMAC) initiative, demonstrating our commitment to hiring and supporting veterans, transitioning service members, military spouses, and dependents. 

With 15+ years of proven delivery and growth, M9 Solutions is a unique small business with credible past performance and key capabilities offering project management services, solution architects, business analysts, program managers, technical architects, and technical consultants. M9 was recognized as an Inc. 5000 Fastest-Growing Private Companies in 2021, 2020, 2019, 2018, 2017, 2016, and 2012. M9 Solutions believes that work should be fun, rewarding, and something everyone can be excited about. We offer a competitive compensation package and value diverse perspectives in driving the vision of the company. 

Source: M9 Solutions careers (Greenhouse)

Similar roles