Insider Threat Program CISA Analyst

Overview

The Digital Modernization Sector at Leidos has an opening for a Hunt Analyst supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP) supporting the Cybersecurity and Infrastructure Security Agency (CISA). This role uses advanced analytics, monitoring, and data correlation to identify insider threats and help safeguard the DHS and CISA missions.

• Review, analyze, and search insider threat data to identify trends, patterns, and insights of potential insider threat indicators.
• Provide analytical, program support services related to the operation of UAM/UEBA tool, monitoring the UAM platform and coordinating across the enterprise to ensure timely response.
• Identify and triage critical/high risk UAM alerts related to a potential insider threat risk to the DHS enterprise.
• Leverage methodologies and behavioral analytics to detect, investigate, and mitigate anomalous activity and policy violations indicative of malicious insider behavior.
• Provide timely response to critical/high UAM alerts (within 4 hours during normal business hours and after‑hour support as defined).
• Author and produce written analytical and threat reporting to address and mitigate insider threat matters.
• Conduct routine liaison with DHS and CISA counterparts to deter, detect, and mitigate insider threat activity.

• Bachelor's degree with 8+ years of prior relevant insider threat experience or Master's with 6+ years of relevant experience (additional years of experience with requisite certifications may be considered in lieu of degree).
• Minimum of 8 years demonstrated knowledge of the intelligence cycle, processes, and organizations.
• Minimum 8 years demonstrated knowledge of various research tools and procedures and methods of analyzing, compiling, reporting and disseminating intelligence data and information.
• Minimum 8 years demonstrated knowledge of research and analytical techniques as applied to difficult and complex assignments in security, law enforcement, and counterintelligence analysis.
• Strong analytical background.
• Strong critical thinking skills.
• Excellent written and verbal communication skills with the ability to deliver briefings and written products to diverse audiences.
• Ability to plan, coordinate, research and analyze all‑source intelligence information for accuracy, timeliness, and relevance to mission.
• Knowledge of current domestic and international threats to U.S. national security interests.
• Ability to establish networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
• Self‑starter capable of working independently to promote program goals.
• Working knowledge of User Activity Monitoring software and solutions.
• Working knowledge of cybersecurity toolsets designed to support ITP mission activities.
• Working knowledge of open‑source toolsets.
• Working knowledge of insider threat frameworks, including Pathway to Violence & Critical Pathway.
• Current TS/SCI clearance and US citizenship required.
• Ability to obtain DHS EOD SCI and willingness to undergo CI polygraph.

• Master’s degree in Criminal Justice, Homeland Security, Cyber Security, or related field.
• Proven experience (8+ years) in intelligence analysis.
• Experience with User Activity Monitoring products and platforms.
• Certified Counter Insider Threat Professional – Fundamentals (CCITP‑F).
• Certified Counter Insider Threat Professional – Analysis (CCITP‑A).
• Completion of the Center for Development of Security Excellence (CDSE) Insider Threat Detection Analysis Course (ITDAC).
• Completion of Workshop on Workplace Assessment of Violence Risk (WAVR‑21).
• Completion of CDSE curriculums INT
  311.CU, INT
  312.CU, CI201.CU.

$82,550.00 – $

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider qualified applicants with criminal histories consistent with relevant laws.