Insider Threat Monitoring Lead

Tyto Athene, LLC•Ashburn, VA

6d•Onsite

About The Position

Tyto Athene is searching for a Insider Threat Monitoring Lead to support a law enforcement customer in Ashburn, VA. You will be responsible for overseeing and executing complex investigations into cybersecurity incidents, insider threats, and violations of security policy. Responsibilities: Conducting forensic analysis: Analyze logs, endpoints, network activity, and digital evidence to uncover root causes and attribution. Providing investigative reports: Deliver thorough reports with findings, timelines, supporting evidence, and recommendations for remediation or disciplinary actions. Maintaining awareness of emerging threats: Apply investigative techniques accordingly and work with the Security Operations Center (SOC) and threat intelligence teams. Supporting investigations: Brief executive leadership on high-impact cases, investigation trends, and systemic vulnerabilities. Continuous improvement: Stay updated on emerging threats, technologies, and industry trends to enhance the Insider Threat Program.

Requirements

Minimum Five (5) years professional experience with an in-depth understanding of the principles, methodologies, and best practices for establishing, operating, and maturing an insider threat program.
Working knowledge of deterrence, detection, and 83 mitigation strategies.
Proficiency in gathering, integrating, analyzing, and responding to threat related information.
Ability to assess risks, identify vulnerabilities, and develop effective countermeasures.
Strong knowledge of cybersecurity principles, network security, data protection, and monitoring employee use of enterprise networks.
Expertise in identifying, assessing, prioritizing, and mitigating security risks.
Ability to analyze intelligence to understand and neutralize threats.
Thorough knowledge of relevant government policies and regulations, such as the National Industrial Security Program Operating Manual (NISPOM)
Certified Information Systems Security Professional (CISSP)
TS/SCI Clearance required

Responsibilities

Conducting forensic analysis: Analyze logs, endpoints, network activity, and digital evidence to uncover root causes and attribution.
Providing investigative reports: Deliver thorough reports with findings, timelines, supporting evidence, and recommendations for remediation or disciplinary actions.
Maintaining awareness of emerging threats: Apply investigative techniques accordingly and work with the Security Operations Center (SOC) and threat intelligence teams.
Supporting investigations: Brief executive leadership on high-impact cases, investigation trends, and systemic vulnerabilities.
Continuous improvement: Stay updated on emerging threats, technologies, and industry trends to enhance the Insider Threat Program.