All Source Analyst - Expert

This position requires an active TS/Sensitive Compartmental Information (SCI) clearance.

Cherokee Analytics is seeking exceptionally qualified individuals to serve as All Source Analysts to support the Defense Counterintelligence Security Agency (DCSA) at the Department of Defense Insider Threat Management Analysis Center (DITMAC). The All Source Analyst will support analytic and operational activities to assemble, correlate, evaluate, and assess information concerning counterintelligence, security, human capital, and information assurance related insider threats against DCSA personnel, programs, information systems, and/or facilities.

Compensation & Benefits:

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

All Source Analyst - Expert Responsibilities Include:

• Produce innovative, all-source Insider Threat-related products for a broad set of customers, including those in the DoD, intelligence, security and law enforcement communities and other senior audiences.
• Aggregate, analyze, and evaluate all available Insider Threat government and open-source information to assist in the evaluation of potential risk as it relates to Insider Threat
• Extract and organize statistical data to support the building of both quantitative and
• Plan and conduct thorough research using all available Insider Threat tools and data sources to discover the information necessary to support analysis
• Assist in the preparation and production of risk warning and situational awareness products related to Insider Threat issues
• Provide editing and quality control of Insider Threat products communicating
• Evaluate and identify policy gaps in existing systems
• Propose and define new User Activity Monitoring (UAM) policy triggers, perform functional testing of proposed and modified policy triggers prior to implementation and final government approval, and prepare policy trigger implementation plan and impact
• Perform configuration management activities to ensure compliance with asset management and continuous monitoring policy requirements
• Prepare, write, and present reports and briefings as required
• Perform event analysis by examining network traffic data and Host Based Security Systems' audit data, SIEM data, and any other technical feeds received from Agency security tools
• Capture human behaviors such as policy violations, compliance incidents, and malicious acts at the endpoint that can service as warning signs leading up to a breach
• Performs other job-related duties as assigned qualitative metrics products, summaries, case studies and trend products recommendations orally and in writing assessment

All Source Analyst - Expert Experience, Education, Skills, Abilities requested:

• Active TS/SCI clearance required.
• Must have at least eight (8) years of relevant experience (with at least a portion of that experience within the last two (2) years).

• Preferred to have a Bachelor's Degree in a related field of study.

• Experience analyzing User Activity Monitoring (UAM) data sets and audit tools

• In-depth understanding of the UAM tool to include policy implementation and writing as well as well as in-depth knowledge with policy tuning and system impacts based on policy changes
• Familiarity with Foreign Intelligence Entity (FIE) and non-state entity use of technology to target, collect, and exploit DOD information and information systems, personnel, and operations
• Ability to identify intelligence gaps, specify data collection requirements to fill gaps in information, and evaluate resulting intelligence requirements
• Ability to present analysis and threat assessments to the Government.
• Experience understanding of the intelligence cycle and architecture, to include planning, collection, research, analysis, and production.
• Proficiency in the use of all source analysis and the proper use of advanced analytic tools (eg, Analyst Notebook).
• Experience providing support to the DCSA Insider Threat mission while conducting in-depth analysis of intelligence data received from various data sources
• Experience providing support and expertise to a Government or Contractor Insider Threat program
• Experience in Personnel Security, Threat Assessment/Threat Management or Counterintelligence supporting the Insider Threat mission.
• Experience in concepts, principles, practices, and techniques associated with threat assessment/threat management, counterintelligence and law enforcement and knowledge of the organization of the security and counterintelligence communities, including their capabilities and jurisdictions and significant experience with collaboration and information sharing within and across the Federal Government, Intelligence, Counterintelligence, Law Enforcement and Security communities.
• Experience with Insider Threat risk assessments and presenting those findings to a variety of audiences, to include senior decision makers.
• Have written and oral communication skills including demonstrated negotiation/collaboration skills required as documented through a variety of experiences briefing and presenting issues at the General/Flag Officer/SES level.
• Knowledge and demonstrated use of research and analytical techniques as applied to difficult and complex assignments in security, law enforcement, and counterintelligence analysis
• Possess understanding of intelligence collection capabilities and limitations, to include but not limited to, technical sensors/platforms and human intelligence sources related to the labor category
• Proficiency using Microsoft Office tools
• Knowledge and training in structured professional judgement tools such as WAVR-21 is preferred.
• Ability to work semi-independently with oversight and direction.
• Must pass pre-employment qualifications of Cherokee Federal

Company Information:

Cherokee Analytics (CA) is a part of Cherokee Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government's mission with compassion and heart. To learn more about CA, visit cherokee-federal.com.

Cherokee Federal is a military friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply.

Similar searchable job titles:

• All Source Analyst

• Insider Threat Analyst

• Intelligence Analyst

• UAM Intelligence Analyst

• Defense Intelligence Analyst

• All Source

• Insider Threat

• User Activity Monitoring (UAM)

• Cyber Threat

• Forcepoint

Legal Disclaimer: All qualified applicants will receive consideration for employment without regard to protected veteran status, disability or any other status protected under applicable federal, state or local law.

Many of our job openings require access to government buildings or military installations. Candidates must pass pre-employment qualifications of Cherokee Federal.

As required by our governmental client, this position requires being a US Citizen AND an active TS/Sensitive Compartmental Information (SCI) clearance.