AOUSC - Insider Threat Analyst

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 80,000 - 100,000; Full time

Job summary

cFocus Software seeks an Insider Threat Analyst to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.

The ideal candidate has active Public Trust clearance, a BS in Computer Science or related field, and 3+ years in IR/Insider Threat with 2+ years in live triage, log correlation, and using Velociraptor, Splunk ES and Sentinel.

Qualifications

• Active Public Trust clearance is required.
• BS in Computer Science, Information Technology, or a related field.
• 3+ years in an IR or Insider Threat role.
• 2+ years performing live triage, log correlation, and detection rule refinement with Velociraptor, Splunk ES and Sentinel.
• 1 year in federal incident handling guidelines per NIST CSWP-29 CSF and NIST SP-800-61.

Skills

IR/Insider Threat experience

Live triage experience

Log correlation

Education

B.S. Computer Science / IT

Tools

Velociraptor

Splunk ES

Sentinel

Job description

cFocus Software seeks an Insider Threat Analyst to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.

Qualifications:

• Active Public Trust clearance
• B.S. Computer Science, Information Technology, or a related field
• 3+ years in an IR or Insider Threat role.
• 2+ years of experience in performing live triage, log correlation, detection rule refinement, to include usage of Velociraptor, Splunk ES and Sentinel.
• 1 year of experience in federal incident handling guidelines as specified in NIST CSWP-29: CSF, and NIST SP-800-61 Computer Security Incident Handling Guide.