Insider Threat Analyst UAM

Insider Threat Analyst UAM

Requirements

• Minimum 1-year experience in/with a Counter-Insider Threat Program.
• Computer Environment (CE) knowledge and skills
• Fulfill the requirements IAW DoD 8140.01 Cyberspace IA Workforce Improvement Program Information Assurance Manager Level 1 within six months after contract award.
• Obtain Certified Counter-Insider Threat Program – Fundamentals (CCITP-F) within six months of contract award.
• Obtain the Defense Counterintelligence and Security Agency Center for Development of Security Excellence Insider Threat Awareness Course (INT101.16)

Responsibilities

• Assist in the initiation, planning, execution, monitoring, control and closing of various UAM projects.
• Assist in the development of briefs, presentations, Project Management Plans (PMPs), Work Breakdown Structures (WBSs), Integrated Master Schedules (IMSs), System Requirement Documents (SRDs), and Plans of Actions and Milestones (POA&Ms).
• Perform UAM systems demonstrations, analyzes audit data, and monitor alerts to identify anomalous/suspicious behavior and activities that present security violations and potential threats to Navy networks.
• Collaborate with pillar leads where appropriate to include IA, Security, and CI/LE to assist with the development of dashboards, filters, and audit policy triggers for audit capabilities.
• Perform and assist in regular trigger refinement based on the analysis of evolving information and behavioral activities across Navy networks.
• Provide management oversight for the planning, execution, and control of all software support activities, to include all functions and sub-tasks required to accomplish overall project objectives.
• Facilitate project and task management, providing technical oversight support for all software design, development, installation, testing, and deployment, operations and maintenance, and documentation tasks.
• Assist in development of business processes and workflows (technical or functional), SOPs, and documentation.
• Provide advice and/or performs complex assignments involving the development, management, evaluation, implementation, or execution of UAM and/or other monitoring tools.
• Perform in one or more of the following areas: cyber threat analysis, incident response, intrusion detection, network/computer forensics, data loss prevention technologies, enterprise audit analysis, and/or automated Audit/Anomaly Threat Detection technology.
• Conduct information technology audits, incident responses, and/or network monitoring at the Enterprise level, to include the use of security tools to conduct such work.

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) certification.
• Project Management Professional (PMP) credential