Insider Threat Analyst with Security Clearance

Centrifuge, LLC. is seeking to fill the Insider Threat Analyst position in Virginia who will be responsible for managing a team of Analysts supporting an insider Threat program. An insider threat team plays a crucial role in safeguarding an organization's sensitive data and critical systems from threats posed by trusted individuals.

Unlike traditional security teams that react to alerts, these teams proactively search for potential insider threats that may have evaded existing security controls • Position: Insider Threat Analyst  • Location: Springfield, Virginia • Position Type: Full-time • Visa Status: US Citizen • Clearance: TS/SCI We are seeking a Hunt Team Analyst to support the DHS Insider Threat Program (ITP) under the HEITS contract. In this role, you will leverage advanced threat- hunting techniques, analytics, and data correlation to identify potential insider threats and strengthen the security posture of DHS.

This is an opportunity to contribute directly to a high-visibility mission focused on protecting national security interests.

Work Schedule: • Normal business hours will be defined as a schedule combination to include weekdays 2pm-10pm shift and weekends 6am-6pm shift. The candidate will have 2- 3 days off based on the schedule determined & the work week should not exceed 40 hours. This position is expected to eventually move to shift work to meet the requirement of 24x7 operations at an undetermined later date. Examine, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.

The selected candidate will be responsible for the following: • Provide analytical, program support services related to the operation of UAM/ UEBA tool.

Monitor UAM platform to identify emerging requirements related to insider threat events and coordinate across the enterprise to ensure timely response. • Conduct further research on the UAM platform to identify patterns of concerning behavior related to a potential insider threat risk to the DHS enterprise. • Provide proactive insider threat-based hunting across the DHS enterprise network, leveraging methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior. • Conduct continuous hunt operations across data and log sources, DHS platforms, EDR tools, and network traffic to identify patterns of insider threat behavior. • Identify mitigation strategies to assist the investigative team in effectively reducing insider threat risk. • Utilize UEBA (User and Entity Behavior Analytics) platforms and techniques to baseline user activity and detect deviations.

Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours).

Required Qualifications: • Bachelor’s degree and 12+ years of prior relevant insider threat experience or Masters with 10+ years of prior relevant experience.

Additional years of experience with requisite certifications will be considered in leu of degree. • Minimum of 10+ years demonstrated knowledge of the intelligence cycle, analytic techniques, systems, processes, and organizations. • Minimum of 10+ years demonstrated knowledge of Threat Assessment & Mitigation Strategies. • Have excellent written and verbal skills with ability to deliver briefings to a diverse group of audiences. • Possess knowledge of current domestic and international threats to U.S. national security interests. • Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization. • Be a self-starter capable of working independently to promote program goals. • Working knowledge of User Activity Monitoring Software (UAM) and solutions. • Working knowledge of Cybersecurity toolsets designed to support ITP mission activities. • Working Knowledge of Open-Source toolsets. • Working Knowledge of Insider Threat Frameworks; Pathway to Violence & Critical Pathway. • Current TS/SCI and Must be a US Citizen. • Willingness to undergo CI Polygraph.

Preferred Qualifications: • Master’s degree from an accredited college or university in Criminal Justice, Homeland security, Cyber Security, or related field • Proven experience (10+ years) in Intelligence Analysis • Experience with User Activity Monitoring products and platforms • Proven experience (4+ years) in Threat Assessment & Mitigation • Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F) • Certified Counter-Insider Threat Professional - Analysis (CCITP-A) • Completion of Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC) • Completion of Workplace Assessment of Violence Risk (WAVR-21) Workshop • Completion of Center for Development of Security Excellence (CDSE) Curriculums; INT311.CU/INT312.CU/CI201.CU If you are interested in this position, please send me a copy of your latest resume at with the information requested below.

Also, please let me know what time/number is best to call to discuss this great opportunity. In case you are not interested in this position, or this is not the right fit for you, please feel free to share this opportunity with your friends/networks or anyone you know who may be interested in this position. Thank you!  • Availability to start a new job • Best Rates • Contact Please don’t hesitate to contact me for any question (s) you may have. All employment is decided on the basis of qualifications, merit, and business need.

Regards, Nashita Wani
Recruitment Consultant
Centrifuge LLC
Direct: 571-698-9651
Office: 703-962-6001 Ext: 526 www.centrifugecorp.com