User Activity Monitoring (UAM) / Insider Threat Analyst

Alexandria, VA

Full Time

Experienced

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary
JCS Solutions is looking for a User Activity Monitoring (UAM) / Insider Threat Analyst to help protect [Customer] personnel, systems and information from insider threats. You'll triage and analyze UAM alerts, document and report findings through a case management system, and share information with affected organizations for follow-on analysis. You'll also work with law enforcement and counterintelligence partners.
The UAM team keeps deploying, maintaining and tuning countermeasures as insider threat tactics, techniques and procedures (TTPs) change. Your work has a direct effect on the customer's security posture and on how the UAM program develops.

Location: Alexandria, VA
Clearance: TS/SCI (active or ability to obtain)

What’s in it for you:

Join a premier technology firm specializing in innovative solutions.
Be part of a collaborative, inclusive, and innovative work culture.
Enjoy tremendous growth potential in a high-performing team environment.
A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!

What you will do:

Triage, analyze and assess UAM alerts to find potential insider threat activity.
Document and report findings through the case management system, and share them with affected organizations for follow-on analysis.
Coordinate with external organizations, especially law enforcement and counterintelligence.
Give the UAM lead information for customer trend analysis and reporting.
Create and put in place countermeasures against specific weaknesses tied to known adversary TTPs.
Deploy, maintain and tune UAM countermeasures as insider threat TTPs change.
Represent the UAM team in meetings as needed.
Recommend improvements to the UAM program to contractor and government leadership.

What you will bring:

Required Qualifications
U.S. citizenship
TS/SCI active or eligibility
4 years of overall work experience
Experience with incident response
Experience with User Activity Monitoring (UAM) or insider threat programs
Required Certifications: Security+ CE (active)

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

Customer Experience: Strive for excellence and delight our clients
Innovation: Embrace creative thinking to enable continual growth and powerful solutions
Accountability: Take ownership of and pride in our actions and service delivery
Inspire: Be inspired to be your best self and have fun in the process
Integrity: Do the right thing, the right way, every time!
Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $00,000.00 - $00,000.00

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.

Apply for this position

Required*

First Name*

Last Name*

Email Address*

Phone*

Address*

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

This position requires U.S. citizenship due to contractual, regulatory, or security requirements. Are you a U.S. citizen?*

Please indicate the highest DoD security clearance you currently hold:*

Do you currently hold an active DoD 8140 IAT Level II certification (Security+ CE or equivalent)?*

Please upload a copy of your current DoD 8140 IAT Level II certification (Security+ CE or equivalent).

This position requires onsite support at Alexandria, VA as the primary work location. Are you able and willing to meet these requirements?*

The salary range for this position is listed in the job posting. Based on that range, what is your minimum salary requirement to consider this opportunity?*

Do you have at least 4 years of relevant work experience?*

Do you have experience with incident response?*

Do you have experience with User Activity Monitoring (UAM) or insider threat programs?*

The following questions are entirely optional.

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.

Gender

Race/Ethnicity

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

A “disabled veteran” is one of the following:
- a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
- a person who was discharged or released from active duty because of a service-connected disability.
A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran status

I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Human Check*

Submit Application