Security Incident & Insider Threat Risk Management Specialist (Mid)

Capefox•Landover, MD

About The Position

Cape Fox Facilities Services is seeking a Security Incident & Insider Threat Risk Management Specialist for a federal agency in the National Capital Region. This exempt position has a stated salary range of $90,000–$100,000 and will remain posted until filled or withdrawn. The specialist manages security incidents and insider threat cases from initial report through resolution. The role includes triaging and resolving reports, coordinating case management with relevant security and investigative stakeholders, developing risk assessments, preparing briefings and executive summaries, conducting vetting checks for the agency’s Risk Mitigation program, preparing Advisory Letters, tracking incidents in centralized systems, and applying the National Insider Threat Policy. The position requires a TS/SCI clearance with a CI Poly.

Requirements

At least 8 years of relevant experience, with some experience within the last 2 years, demonstrating independent execution, proficiency with applicable laws, policies, and standards, and the ability to produce professional written materials and briefings.
At least 8 years of experience in security incident management, insider threat operations, counterintelligence, or law enforcement.
Experience with case management, stakeholder coordination, and risk assessment methodologies.
Knowledge of FIS and NITP.
Bachelor’s degree in a related field, or 12 years of experience in lieu of a degree.
TS/SCI clearance with a CI Poly.

Responsibilities

Manage the lifecycle of security incidents and insider threat cases from initial report to resolution.
Triage and resolve incidents reported through the incident response system and other channels.
Coordinate case management with Security, Counterintelligence, Law Enforcement, and the Office of the Inspector General.
Develop insider threat risk assessments.
Prepare briefing materials and executive summaries.
Execute vetting checks for the agency Risk Mitigation program.
Prepare Advisory Letters.
Track incidents in centralized systems.
Apply the National Insider Threat Policy.