Insider Threat Analyst

Semper Valens Solutions - Shaw Air Force Base, SC

Full-time - Mid Level

Shaw Air Force Base, SC

Professional, Scientific, and Technical Services

About the position

The Insider Threat Analyst will work closely with the AFCENT Insider Threat working group to develop and implement a robust Insider Threat management capability. This role is essential for detecting and reporting insider threats, ensuring the security of sensitive information and systems. The position is based at Shaw AFB, SC, with potential travel to CENTCOM Area of Operations as needed.

Responsibilities

• Support the AFCENT Insider Threat office and Office of Special Investigations (OSI) in executing the Command Insider Threat program.
• Conduct Insider Threat Operations using host, network, intelligence, and dynamic data acquisition technologies to identify and counter Insider Threats.
• Employ User Activity Monitoring (UAM) capabilities to detect anomalous insider activity.
• Conduct auditing and data collection for Insider Threat cases and investigations.
• Provide on-site support and on-call response for operating, maintaining, and auditing UAM tools across network locations.
• Analyze findings from OSI and supporting organizations during insider threat operations.
• Develop metrics and trends to identify internal cyber threat actors and potential espionage attempts.
• Tune UAM tools in accordance with DoD, OSD, and Air Force guidance.
• Collaborate with Cybersecurity Engineering personnel for the operation and maintenance of UAM tools.
• Provide data and briefing support to the Command Insider Threat office.

Requirements

• B.S. in a related field and 5 or more years of relevant IT experience (preferred); OR 7 or more years of relevant IT experience.
• ITIL Foundation certification required.
• Active Secret Clearance required.