Counter-Insider Threat Program Analyst

Booz Allen Hamilton•Usa, CO

1d•Onsite

About The Position

As a Counter‑Insider Threat Analyst supporting US Space Command’s Counter‑Insider Threat Program (C‑InTP), you’ll be on the first line of defense mitigating insider threats. You’ll triage and analyze indicators from multiple internal and external sources, correlate activity to govt reporting thresholds, and deliver rapid, well‑reasoned briefings that inform senior decision‑makers. You’ll work across networks, using specific job related tools and help shape training, policy, and case management for a command‑wide program. If you thrive in fast‑paced environments, communicate crisply under time pressure, and bring disciplined judgment to sensitive matters, this role lets you make a direct impact on mission success.

Requirements

4+ years of experience conducting research and analysis in support of DoD or IC missions such as CI, security and force protection, or cyber operations
Experience with DITMAC reportable thresholds and Potential Risk Indicators (PRIs), DSoS, NITTF guidance, DoDI 5205.16, the National Insider Threat Policy, and SORN‑driven records management
Ability to produce time‑critical briefings
TS/SCI clearance
HS diploma or GED

Nice To Haves

4+ years of experience supporting Combatant Commands or enterprise threat detection programs
Experience with C‑InTP hub stakeholder coordination including CI, LE, Security, HR, Legal, Behavioral Health, OPSEC, or IG
Experience with UAM, UEBA, DLP, SIEM, case management tools, and command‑wide collaboration platforms
Possession of strong critical thinking, pattern recognition, behavioral analysis, risk assessment, prioritization, and threat intelligence analysis skills
Possession of excellent written and verbal communication skills
Possession of discretion, professionalism, and ethical conduct
Insider Threat Program Manager or Analyst Certification

Responsibilities

Conduct daily triage of insider threat information and data detection, including intake, analysis, coordination, and rapid reporting on risk trigger events and indicators relative to government thresholds.
Support USSPACECOM exercises.
Capture meeting minutes and track tasks for C‑InTP Hub stakeholders.
Research, develop, maintain, and deliver consistent C‑InTP training, awareness materials, and briefing products.
Deliver training at SCI indoctrinations, during National Insider Threat Awareness Month.
Monitor and retrieve metrics for command‑mandated annual C‑InT computer‑based training.
Draft, review, staff, and maintain C‑InTP policies, SOPs, and governing documents.
Conduct semi‑annual policy and SOP reviews and recommend updates to reflect national‑level changes and enterprise best practices.
Assist the PM annually with revising, publishing, and securing approval for the C‑InTP Annual Report, including data and metrics, program accomplishments, and challenges.
Document stakeholder actions and decisions.
Manage C‑InT inquiries and maintain and update all C‑InTP led and supported cases in approved case management systems.
Track cases end‑to‑end with comprehensive chronological analysis through final disposition and ensure proper archival and retention upon closure.