Insider Threat Analyst

INSIDER THREAT ANALYSTSpaceX is seeking a dynamic and driven individual with a demonstrated ability to work independently and as a member of a team in a fast-paced, high-tech environment. Our goal is to protect some of the world’s most advanced technologies including rockets, Dragon capsules for human transport, inter-planetary transport vehicles, the world's largest satellite communications network, etc. As an industry leader, we are a target of adversaries, both foreign and domestic, focused on slowing us down and accessing our proprietary technology.

The work we do will literally safeguard mankind becoming an interplanetary species.

You will be responsible for the research, analysis, production, and dissemination of information relevant to protecting the safety and security of personnel, brand, global assets, intellectual property, and operations s role will triage anomalous event data and analyze insider threat program datasets to respond to threats posed to Space

X. You will use comprehensive understanding of various collection methods and platforms to explore new data sources, build effective queries, and combine information from disparate sources.

RESPONSIBILITIES:

Conduct comprehensive investigations and analysis in support of SpaceX intellectual property and security

Uphold investigation and analytic tradecraft standards including confidentiality, objectivity, lawfulness, timeliness, and use of all available sources of information

Collect and analyze available program data to evaluate insider threat risk to SpaceX infrastructure, programs, and operations

Triage anomalous event data associated with indicators of data exfiltration, data destruction and other key indicators of concern

Conduct internal investigations working with Information Security, HR, Legal, Government Security, Physical Security, and external partners based on information derived from internal and external sources

Utilize network monitoring, data analytic, and other tools (DLP/SIEM/UEBA) to identify anomalous activity, initiate investigations and decipher underlying trends

Extract and organize insider threat program data to build metrics, reports and case studies addressing mission requirements and timelines

Communicate findings in a timely and accurate manner to team members, management, and relevant stakeholders

Support employee training and briefings for internal and external audiences

Liaise with external industry and government partners to benchmark insider threat program, share threat intelligence, and further investigations

Continuously identify and help implement program improvement methods

Manage and safeguard sensitive information, including case files, employee PII, and intelligence reports

BASIC QUALIFICATIONS:

Bachelor's degree and 2+ years of professional experience in internal investigations, information security, or counterintelligence; OR 4+ years professional experience in information security, internal investigations, or counterintelligence in lieu of a degree PREFERRED

SKILLS AND EXPERIENCE:

1+ year using a SIEM and/or conducting digital forensic investigations in a government or corporate environment

Working level understanding of insider threat program missions, internal stakeholders, and manifestations of insider threats

Proficiency in Microsoft Purview for eDiscovery

Experience performing business process automation or constructing data pipelines

Familiarity with risk-based alerting, detection, and tuning concepts for insider risk Experience conducting preliminary assessments, determining scope, investigation planning, evidence collection/handling, interviewing and reporting findings to internal and external stakeholders

Ability to conduct interviews on short notice according to established internal guidelines.

Excellent written and oral communication skills, with the ability to produce clear and concise reports

Highly organized with a strong attention to detail

Ability to adapt to changing priorities and deadlines

Can swiftly adapt to new technical environments and workflows

Ability to exercise discretion when conducting confidential investigations

ADDITIONAL REQUIREMENTS:

Must be able to work extended hours and weekends as needed to support critical efforts and operations

Must be willing to travel ad hoc Active TS/SCI clearance, or ability to obtain one. With an active clearance, candidates will be subject to pre-employment screening including background check and drug/alcohol test as well as random drug and alcohol testing during…