Source Analyst Expert

Position: All Source Analyst Expert
Job Description

All Source Analyst - Expert

This position requires an active TS/Sensitive Compartmental Information (SCI) clearance.

Cherokee Analytics is seeking exceptionally qualified individuals to serve as All Source Analysts to support the Defense Counterintelligence Security Agency (DCSA) at the Department of Defense Insider Threat Management Analysis Center (DITMAC). The All Source Analyst will support analytic and operational activities to assemble, correlate, evaluate, and assess information concerning counterintelligence, security, human capital, and information assurance related insider threats against DCSA personnel, programs, information systems, and/or facilities.

Compensation & Benefits:

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

All Source Analyst - Expert Responsibilities Include:

• Produce innovative, all-source Insider Threat-related products for a broad set of customers, including those in the DoD, intelligence, security and law enforcement communities and other senior audiences.
• Aggregate, analyze, and evaluate all available Insider Threat government and open-source information to assist in the evaluation of potential risk as it relates to Insider Threat
• Extract and organize statistical data to support the building of both quantitative and
• Plan and conduct thorough research using all available Insider Threat tools and data sources to discover the information necessary to support analysis
• Assist in the preparation and production of risk warning and situational awareness products related to Insider Threat issues
• Provide editing and quality control of Insider Threat products communicating
• Evaluate and identify policy gaps in existing systems
• Propose and define new User Activity Monitoring (UAM) policy triggers, perform functional testing of proposed and modified policy triggers prior to implementation and final government approval, and prepare policy trigger implementation plan and impact
• Perform configuration management activities to ensure compliance with asset management and continuous monitoring policy requirements
• Prepare, write, and present reports and briefings as required
• Perform event analysis by examining network traffic data and Host Based Security Systems' audit data, SIEM data, and any other technical feeds received from Agency security tools
• Capture human behaviors such as policy violations, compliance incidents, and malicious acts at the endpoint that can service as warning signs leading up to a breach
• Performs other job-related duties as assigned qualitative metrics products, summaries, case studies and trend products recommendations orally and in writing assessment

All Source Analyst - Expert Experience, Education, Skills, Abilities requested:

• Active TS/SCI clearance required.
• Must have at least eight (8) years of relevant experience (with at least a portion of that experience within the last two (2) years).
• Preferred to have a Bachelor's Degree in a related field of study.
• Experience analyzing User Activity Monitoring (UAM) data sets and audit tools
• In-depth understanding of the UAM tool to include policy implementation and writing as well as well as in-depth knowledge with policy tuning and system impacts based on policy changes
• Familiarity with Foreign Intelligence Entity (FIE) and non-state entity use of technology to target, collect, and exploit DOD information and information systems, personnel, and operations
• Ability to identify intelligence gaps, specify data collection requirements to fill gaps in information, and evaluate resulting intelligence requirements
• Ability to present analysis and threat assessments to the Government.
• Experience understanding of the intelligence cycle and architecture, to include planning, collection, research, analysis, and production.
• Proficiency in the use of all source analysis and the proper use of advanced analytic tools (e.g., Analyst Notebook).
• Experience providing support to the DCSA Insider Threat mission while conducting in-depth analysis of intelligence data received from various data sources
• Experience providing support and expertise to a Government or Contractor Insider Threat program
• Experience in Personnel Security, Threat Assessment/Threat Management or Counterintelligence supporting the Insider Threat mission.
• Experience in concepts, principles, practices, and techniques associated with threat assessment/threat management, counterintelligence and law enforcement and knowledge of the organization of the security and counterintelligence communities, including their capabilities and jurisdictions and significant experience with collaboration and information sharing within and across the Federal Government, Intelligence, Counterintelligence, Law Enforcement and Security communities.
• Experience with Insider Threat risk assessments and presenting those findings to a variety of audiences, to include senior decision…