Active TS

Peraton•Arlington, VA

2d•Onsite

About The Position

Peraton is currently seeking to hire a Digital Forensic Analyst Cyber Investigation Analyst - OTA to join our Federal Strategic Cyber program and become a part of our Cyber & Intelligence sector. In this role, you will support the Operational Threats & Analysis (OTA) Team. You will audit for counterintelligence, insider threat, and criminal activities pertaining to Diplomatic Security jurisdiction on the network. You will also recommend strategies for assessing inappropriate use of the Department’s networks, research and recommend tools for monitoring employee computer use and assessing user behavior, and provide support to DS criminal investigators. You will perform in-depth log analysis to determine trends, patterns, and suspicious activity, and interface and coordinate with other U.S. Government, Intelligence Community, and Law Enforcement organizations performing insider threat auditing.

Requirements

A bachelor’s degree and a minimum of 9 years’ relevant experience. A HS diploma + an additional 4 years of experience may be considered in lieu of degree.
One of the following certifications, with continued certification required as a condition of employment: CASP+ CE, CCNP Security, CEH, CFR, CHFI, CISA, CISSP (or Associate), Cloud+, CND, CySA+, GCED, GCIH, GICSP, SSCP.
Experience performing threat analysis.
Experience with a User Activity Monitoring (UAM) tool.
Experience dealing with security or law enforcement investigative personnel.
Experience working in a Security Operations Center (SOC) in general, in analyzing network traffic.
U.S. citizenship required.
Active Top Secret security clearance.
The ability to obtain a final Top Secret/SCI security clearance.

Nice To Haves

Experience with digital evidence acquisition, user activity monitoring, and technical analysis.

Responsibilities

Support the Operational Threats & Analysis (OTA) Team.
Audit for counterintelligence, insider threat, and criminal activities pertaining to Diplomatic Security jurisdiction on the network.
Recommend strategies for assessing inappropriate use of the Department’s networks.
Research and recommend tools for monitoring employee computer use and assessing user behavior.
Provide support to DS criminal investigators.
Perform in-depth log analysis to determine trend, patterns, and suspicious activity.
Interface and coordinate with other U.S. Government, Intelligence Community, and Law Enforcement organizations performing insider threat auditing.