Active TS

Peraton•Arlington, VA

15h•Onsite

About The Position

Peraton is seeking a Digital Forensic Analyst Cyber Investigation Analyst - OTA to join their Federal Strategic Cyber program within the Cyber & Intelligence sector. This is an on-site, full-time position located in Arlington, VA. The role involves supporting the Operational Threats & Analysis (OTA) Team by auditing for counterintelligence, insider threat, and criminal activities related to Diplomatic Security jurisdiction on the network. The analyst will recommend strategies for assessing inappropriate use of the Department’s networks, research and recommend tools for monitoring employee computer use and assessing user behavior, and provide support to DS criminal investigators. A key responsibility includes performing in-depth log analysis to identify trends, patterns, and suspicious activity, as well as interfacing and coordinating with other U.S. Government, Intelligence Community, and Law Enforcement organizations involved in insider threat auditing.

Requirements

A bachelor’s degree and a minimum of 9 years’ relevant experience. A HS diploma + an additional 4 years of experience may be considered in lieu of degree.
One of the following certifications, with continued certification required as a condition of employment: CASP+ CE, CCNP Security, CEH, CFR, CHFI, CISA, CISSP (or Associate), Cloud+, CND, CySA+, GCED, GCIH, GICSP, SSCP.
Experience performing threat analysis.
Experience with a User Activity Monitoring (UAM) tool.
Experience dealing with security or law enforcement investigative personnel.
Experience working in a Security Operations Center (SOC) in general, in analyzing network traffic.
U.S. citizenship required.
Active Top Secret security clearance.
The ability to obtain a final Top Secret/SCI security clearance.

Nice To Haves

Experience with digital evidence acquisition, user activity monitoring, and technical analysis.

Responsibilities

Support the Operational Threats & Analysis (OTA) Team.
Audit for counterintelligence, insider threat, and criminal activities pertaining to Diplomatic Security jurisdiction on the network.
Recommend strategies for assessing inappropriate use of the Department’s networks.
Research and recommend tools for monitoring employee computer use and assessing user behavior.
Provide support to DS criminal investigators.
Perform in-depth log analysis to determine trend, patterns, and suspicious activity.
Interface and coordinate with other U.S. Government, Intelligence Community, and Law Enforcement organizations performing insider threat auditing.