Navy Insider Threat HUB Analyst

Mobius•Arlington, VA

20d•$105,000 - $115,000

About The Position

Mobius is seeking a Navy Insider Threat HUB Analyst to study, analyze, advise, research, and develop deliverables that advance the detection, deterrence, and mitigation of insider threat activity in the Department of the Navy. The role supports safeguarding national security, service information, and data on Navy and civilian contractor information systems while meeting Navy mission requirements. The OPNAV Insider Threat Hub monitors, audits, fuses, and analyzes information for insider threat detection and mitigation. Hub personnel analyze information and activity indicative of insider risk and refer relevant data to appropriate officials for investigation or resolution. The analyst may work in areas such as cyber threat analysis, incident response, intrusion detection, network and computer forensics, data loss prevention, enterprise audit analysis, and automated audit or anomaly threat detection. The position supports insider threat and cybersecurity collection, detection, deterrence, analysis, and mitigation; prepares reports and briefings; tracks case and assessment metrics; helps resolve identified discrepancies; supports software testing; and evaluates and develops Hub-related policies.

Requirements

At least 1 year of experience working in or with a Counter-Insider Threat Program.
Active Top Secret/SCI clearance.

Responsibilities

Perform in one or more areas: cyber threat analysis, incident response, intrusion detection, network/computer forensics, data loss prevention technologies, enterprise audit analysis, and/or automated audit/anomaly threat detection technology.
Assist with the development, implementation, and management of Insider Threat/cybersecurity collection, detection, deterrence, analysis, and mitigation.
Conduct enterprise-level information technology audits, incident responses, and/or network monitoring using security tools.
Generate analysis reports, brief team members and/or senior management on findings, and support development of Tactics, Techniques, and Procedures (TTPs).
Receive automated user activity monitoring/audit data and alerts from sensors on Navy classified and unclassified SCI networks, and include relevant findings in analytical reports and/or Insider Threat Risk Assessments (ITRAs).
Provide the Government with daily, weekly, and monthly tracking metrics, including cases worked, closed, and open; ITRAs written; and submissions to the Navy case management system and the DoD Insider Threat Management Analysis Center System of Systems (DITMAC DSOS).
Perform analysis and provide assessments to the Government, and assist in resolving identified discrepancies to detect, deter, and mitigate potential insider threats.
Assist with testing new and existing software for case management, data set review, and/or development of Hub-related policies.
Evaluate existing Hub-related policies, modify policies as needed to achieve program objectives, and/or develop new policies.