Navy Insider Threat Hub Analyst

Mobius•Arlington, VA

About The Position

Mobius is seeking an Insider Threat HUB Analyst. In this role you will study, analyze, advise, research and develop deliverables to advance the detection, deterrence and mitigation of insider threat activity in the Department of the Navy (DoN), while safeguarding National Security, service information and data on both Navy and civilian contractor’s information systems through the application of knowledge and resources in achieving the Navy’s mission requirements defined herein. The OPNAV Insider Threat Hub possesses an integrated capability to monitor, audit, fuse, and analyze incoming information for insider threat detection and mitigation. Hub personnel analyze information and activity indicative of an insider risk and refer that data to the appropriate officials for investigation and/or resolution.

Requirements

Must have a minimum of 1-years’ experience working in/with a Counter-Insider Threat Program.
Possess a Certified Certificate Insider Threat Professional – Fundamentals/Analyst (CCITP-F/A) certification (Must be obtained within the first 6 months after start.)
Security + certification.
Certified Information Systems Security Professional (CISSP) certification.
Active Top Secret/SCI clearance.

Responsibilities

Assist in the development, implementation, and management of Insider Threat/cybersecurity collection, detection, deterrence, analysis, and mitigation.
Conduct information technology audits, incident responses, and/or network monitoring at the Enterprise level, to include the use of security tools to conduct such work.
Assist in generating analysis reports and briefing other team members and/or senior management on analytical findings as well as support the development of Tactics, Techniques, and Procedures (TTPs).
Receive automated user activity monitoring/audit data and alerts from sensors deployed on Navy’s classified and unclassified SCI networks from the UAM Team and include those findings “if any” in their analytical report and/or Insider Threat Risk Assessment (ITRA).
Provide the Government, tracking metrics captured on a daily, weekly, and monthly basis: Cases worked, closed, and current open cases that should reflect the analyst duties and workload. Metrics also include Insider Threat Risk Assessments written, submissions into the Navy’s case management system, and the DoD Insider Threat Management Analysis Center System of Systems (DITMAC DSOS).
Perform analysis and provide assessments to the Government and assist the Government in resolving identified discrepancies in an attempt to detect, deter, and mitigate a potential Insider Threats.
Assist with the facilitation of testing new/existing software for the purpose of case management, data set review, and/or the development of Hub related policies.
Evaluate existing Hub related policies, modify policies where needed to achieve program objectives, and/or develop new policies as necessary.