Insider Threat Program Hunt Team Analyst

M9 Solutions is dedicated to providing IT services and solutions to the Federal Government by mobilizing the right people, skills, clearance levels, and technologies to help organizations that desire improved performance and modern, sustainable change. M9 has provided quality IT services and support to more than 30 Federal Agencies and multiple commercial customers nationwide. Our capabilities include IT Talent Solutions, Data Delivery & Analytics, Cyber Security, Cloud Migration, Applications and Infrastructure, Software Development, and Finance & Accounting.

M9 Solutions is seeking an Insider Threat Program Hunt Team Analyst to work on-site in support of a government contract for a client located in Springfield, VA. An active TS/SCI clearance with the ability to obtain CI poly is required.

Responsibilities

• Examines, analyzes, and searches insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
• Provides analytical and program support services related to the operation of UAM/UEBA tools. Monitors the UAM platform to identify emerging requirements related to insider threat events and coordinates across the enterprise to ensure timely response.
• Conducts further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the enterprise.
• Provides proactive insider threat-based hunting across the enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
• Conducts continuous hunt operations across data and log sources, enterprise platforms, EDR tools, and network traffic to identify patterns of insider threat behavior.
• Identifies mitigation strategies to assist the investigative team in effectively reducing insider threat risk.
• Utilizes UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations. Provides timely response to critical/high UAM alerts.

Required Skills and Qualifications

• TS/SCI security clearance with the ability to obtain a CI poly.
• Bachelor's degree and 12+ years of prior relevant insider threat experience, or master's degree with 10+ years of prior relevant experience. Additional years of experience with requisite certifications will be considered in lieu of degree.
• U.S. citizenship is required for this role.
• 10+ years of demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations.
• 10+ years of demonstrated knowledge of Threat Assessment and Mitigation Strategies.
• Possesses excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences.