POSITION SUMMARY:

Is curiosity your primary talent?
Do you have a passion for finding bad guys?
Is your ideal career at the intersection of technology and people that use it?
A leading U.S. energy company seeks an inquisitive teammate to join our Insider Threat analysis cell in an associate-level technical analyst role. The candidate will directly support the company’s efforts to address potential insider threats to the company’s facilities, personnel, technology, operations, and brand. This position reports to the Manager of the Insider Threat Analysis Center.
The successful applicant will leverage analytical skills to identify and track potential insider threat activity, develop content specific to technical sabotage against critical systems, conduct research on behalf of the team, and help ensure that capabilities are effectively implemented. The analyst will learn to use correlation, statistical techniques, machine learning capabilities and artificial intelligence tools to identify and analyze suspicious behavior.

REQUIREMENTS:

Minimum

• BA/BS in computer science, data science, engineering, mathematics, or security-related field or equivalent background and experience
• Desire to become an expert at detecting and classifying insider threats
• Intellectual curiosity to find solutions
• Excellent problem solving and analytical skills
• Strong written and oral communication skills; ability to successfully communicate analytic results
• Ability to prioritize work and complete assignments under supervision

Preferred

• Prior experience building content, alerts, and workflows utilizing the Splunk toolset
• Beginner skills in Splunk Language (SPL)
• Familiarity using multiple analytic methodologies, programs, and tools in support of cyber and human threat analysis
• Familiarity with global threats to energy sector

• Triage alerts by conducting limited inquiry to classify activity for further investigation and resolution
• Interpret relevant data sets, use techniques, and manipulate tools to identify potential insider threat behavior and risks
• Handle confidential situations and data with appropriate discretion
• Implement best practices for tuning analytic technologies to maximize probability of detection while minimizing false positives
• Improve existing methodologies for technical threat assessment
• Create and document methods to identify or prevent insider threats
• Support day-to-day operations related to the Insider Threat Program
• Stay current on relevant technologies as assigned