Insider Risk Analyst

Peraton is a national security and enterprise IT company serving government agencies and the U.S. armed forces. The Insider Risk Analyst will detect, evaluate, and mitigate insider risks, support counterintelligence investigations, analyze technical and non-technical data, and communicate findings and recommendations to stakeholders and senior leaders.

What you'll do:

• Work collaboratively to develop, monitor, and evolve corporate insider risk detections and identify high risk behavior
• Correlate information from multiple technical (user activity monitoring (UAM), user behavior analytics (UBA), data loss prevention (DLP), security information and event management (SIEM)) and non-technical data sources to enable proactive insider risk detection
• Provide analytical and investigative support to internal counterintelligence and insider risk mitigation efforts
• Effectively conduct interviews of persons of interest and gather information in support of investigations
• Prepare and deliver reports, using metrics and data visualizations, to effectively communicate findings, trends, and patterns
• Develop recommendations to address and remediate threat discoveries, and proactive measures to promote a secure environment
• Steady involvement in all aspects of insider risk and counterintelligence program, including developing security awareness, training, and education products
• Provide effective briefings to large audiences, key stakeholders, and senior leaders, on insider risk or counterintelligence issues using metrics and analysis
• Maintain an all-source approach to evaluating insider risks, using a range of tools and data sources, both internal and external
• Totality of access and subsequent analysis will help identify trends, patterns, and anomalies, inform significant risk-based decisions, and proactively mitigate threats

What they're looking for:

• 0 years of experience with a Bachelors Degree
• Requires a BS/BA in Computer Science, Cybersecurity or equivalent degree
• Ability to obtain Secret clearance
• Basic understanding of insider risk and counterintelligence risk activity such as data theft, espionage, fraud, sabotage, unintentional incidents, and workplace violence
• Familiarity with insider risk detection technologies, including but not limited to UAM, UBA, SIEM, DLP
• Experience interpreting data and analyzing non-technical data feeds to uncover anomalies
• Basic knowledge of Cyber Security Operations Center (CSOC) or similar environment methodology, to include threat monitoring, intrusion detection, incident response, handling, and remediation
• Ability to conduct open-source intelligence analysis
• Excellent critical thinking, organization, and communication skills and ability to work on various tasks with competing deadlines
• Curiosity and willingness to explore new technologies that will make the Insider Risk program more effective and efficient
• Proficient in one or more of the following languages: Python, C#, C++, Perl, Java
• Experience analyzing, cleaning, transforming, and manipulating data

Benefits:

• Flexible for occasional telework
• Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay