Overview
The primary focus of this role is to lead and supervise investigations related to insider threats, ensuring adherence to established processes and governance. Specifically, the role involves reviewing and escalating findings within the case management system, stakeholders, and to upper management. Additionally, the position involves deploying, maintaining, and fine-tuning countermeasures in response to evolving insider threat tactics, techniques, and procedures (TTPs).
Responsibilities
Core Responsibilities Manage the Insider threat technology suite and conduct analysis to identify threats and patterns of behavior.
Provide expertise in internal risk and threat analysis to enhance decision-making in various scenarios.
Investigate and document issues related to computer misuse, policy violations, counterintelligence concerns, foreign influence, financial stressors, and insider threats.
Assist investigations by analyzing logs, digital evidence, interview reports, and results of media exploitation.
Utilize Network and Host-based tools to detect potential threats and unauthorized activity within IT and OT (Operational Technology) environments
Identify unusual employee behavior using various databases, datastores, and security appliances to identify potential risks.
Assist with investigations and inquiries related to insider threats, employee misconduct, and legal violations.
Conduct liaison with local, state, and federal agencies.
Report findings to company management and stakeholders.
Ensure compliance with company and regulatory policies supporting Insider Risk efforts.
Qualifications
Required Education/Experience Master's Degree and 6 years of relevant work experience Relevant to intelligence, counterintelligence, counterterrorism, law enforcement, national security, or cyber security or
Bachelor's Degree and 8 years of relevant work experience Relevant to intelligence, counterintelligence, counterterrorism, law enforcement, national security, or cyber security
Relevant Work Experience Excellent computer skills, with proficiency in Microsoft Outlook, Excel, Word, PowerPoint, and TEAMS applications. Required
Ability to compile data into presentations and reports for executive management. Required
Excellent verbal and written communication skills. Required
Must have strong analytical, technical, and interpersonal skills. Required
Understanding of crisis/security response operations and supporting technologies and processes. Required
Prior experience as an intelligence analyst, or similar position, with a private company, military, intelligence agency, and/or law enforcement agency. Required
A strong background in two, or more, of the following fields: intelligence cycle, intelligence collection requirements, protective intelligence, executive protection, critical infrastructure protection, investigations, threat management, or cyber security. Required
Possess and maintain eligibility for a U.S. government security clearance at the Secret level or higher within one year of employment. Required
Experience conducting Open Source Intelligence (OSINT) analysis. Required
Basic knowledge of operating systems, networking, IT hardware, and virtualized environments. Preferred
Have familiarity with DFIR tools for preservation and analysis. Preferred
Experience working with companies, law enforcement, military, and/or security services outside the United States. Preferred
Understanding of behavior-based analytical functions. Preferred
Understanding of supply chain functions. Preferred
Understanding of enterprise risk management or Sarbanes-Oxley Act requirements. Preferred
Licenses And Certfications
