Insider Threat Analyst

Location: Springfield, VA

Type: Full Time

Min. Experience: Mid Level

Overview
Big Sky is seeking Insider Threat Analysts in the areas of All source Intelligence, Cyber, Counterintelligence, and Law Enforcement with active Top Secret/SCI clearance. These positions will be performed on-site in Springfield, Virginia.

These roles will triage anomalous event data; conduct complex, deep-dive, all-source analysis; provide investigative leads; and perform other duties as assigned.

We’re looking for self-motivated, results-oriented professionals who thrive in a high-risk, high-reward environment.

Overall Responsibilities and Duties

  • Analysis.  Conduct all source intelligence analysis, cyber intelligence analysis, counterintelligence analysis, law enforcement intelligence analysis.

  • Data triage.  Conduct data triage of anomalous events collected by approved SII User Activity Monitoring (UAM) Tool on average of 8,000 - 10,000 events per analyst per month. Elevate anomalous events of concern to a Division government supervisor.

  • Insider Threat Referrals (e.g. investigative leads).  Produce Insider Threat referrals IAW requirements established in the SIIA SOP and Writing Guide that document issues on NGA employees’ computer misuse, various violations of NGA policies, counterintelligence concerns, foreign influence, financial stressors, threats to self or others, or Continuous Evaluation (CE) adjudicative concerns.

  • Referrals must be documented in written products and reports in format established in the SIIA SOP and Writing Guide and published in an average of 2-3 days per referral after event detection.

  • Analytic Case Support.  Conduct case support to NGA Investigative OPRs IAW requirements established in the SIIA SOP and Writing Guide as requested in the course of NGA investigations, administrative or security inquiries, counterintelligence risk assessments, or other adjudicative assessments, to include support to investigations involving 811 counterespionage referrals to Federal Law Enforcement agencies, DoD investigators, and OIG misconduct cases.

  • Case support activities must be documented in written products and reports in format established in the SIIA SOP and Writing Guide and produced on average of 21-30 days per report.

  • Special Analytical Projects. Complete special analytical projects on topics as directed by Division government supervisors IAW requirements established in the SIIA SOP and Writing Guide.

  • Special analytical projects must be documented in written products and reports in format established in the SIIA SOP and Writing Guide and produced on average of 21 days per report.  

  • Access and integrate information from Agency network monitoring tools and other data analytics tools and sources to decipher underlying trends or uncover anomalies and discern obscure patterns and attributes.  

  • Prepare and present analysis, in the form of briefings and/or reports, to SIIA government supervisors. Briefings and reports should be mostly free from style and grammatical errors, should address all investigative and analytical findings, and be and ready for publication by a SIIA government supervisor.

  • Perform proactive inquiries and collaborate with NGA investigative entities, IC organizations, and Law Enforcement agencies/entities, at the direction and oversight of SIIA government supervisors.

Requirements: All source Intelligence Analysts

  • All source intelligence analysts are required to have a minimum of 7 years of all source intelligence analysis experience. 

  • Experience with data analytics tools and data bases (e.g. analyst notebook, etc.), and graduate of the Federal Law Enforcement Training Center (FLETC), Defense Cyber Investigations Training Academy (DCITA), Joint Counterintelligence Training Academy (JCITA), DoD, other US Federal Government, Intelligence Community, State, or local intelligence analysis formal training courses or programs.

  • A Bachelor’s degree or greater in a related field is desired.

Requirements: Cyber Analysts

  • Cyber operations or cyber intelligence analysts are required to have a minimum of 7 years of cyber analysis experience, experience with data analytics tools and data bases (e.g. analyst notebook, etc.), and graduate of FLETC, DCITA, JCITA, DoD, other US Federal Government, Intelligence Community, State, or local cyber analysis formal training courses or programs.

  • A Bachelor’s degree or greater in a related field is desired.

Requirements: Counterintelligence Analysts

  • Counterintelligence investigators or counterintelligence analysts are required to have a minimum of 11 years CI analysis or other CI experience, experience with data analytics tools and data bases (e.g. analyst notebook, etc.), and graduate of FLETC, DCITA, JCITA, DoD, other US Federal Government, Intelligence Community CI analysis or other formal CI training courses or programs.

  • A Bachelor’s degree or greater in a related field is desired.

Requirements: Law Enforcement Analysts

  • Law Enforcement officers are required to have a minimum of 2 years of law enforcement intelligence analysis experience or general law enforcement investigations or operations experience.  Other requirements include experience with data analytics tools and data bases (e.g. analyst notebook, etc.), graduate of  FLETC or other Federal, State, or local law enforcement (LE) training courses or programs.

  • A Bachelor’s degree or greater in a related field is desired.

Our Values:

Everything we do at Big Sky is dictated by our values. We take them very seriously, and we're proud of this unwavering commitment.

ResultsWe get them -- for each other, for our customers, our partners, and our families.

HustleWe don't take "no" for an answer. We don't make excuses. We scrape and claw to make sure the details are always right. 

CuriosityWe question everything, and learn constantly, from any source we can get our hands on. We are smart because we know we don't have all the answers, and because we always want to get better.

RespectWe treat each other like adults. We respect what makes each of us unique and productive. We practice honest and ongoing feedback as a way of respecting each other. We know that without ethics (doing the right thing) and honesty, there can be no trust or respect.

Big Sky is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, disability, age (40 or older), genetic information (including family medical history) or protected Veteran status.

Apply for this Position
* Required fields
First name*
Last name*
Email address*
Location *
Phone number*
Resume*

Attach resume as .pdf, .doc, .docx, .odt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

Cover Letter
What’s your citizenship / employment eligibility?
What’s your highest level of education completed?*
Desired salary*
In 150 characters or fewer, tell us what makes you unique. Try to be creative and say something that will catch our eye!
Do you have an ACTIVE TS/SCI clearance?*
Which specialty area of analysis are you most interested in and qualified to perform?*
How many years of experience do you have in the specialty analysis field selected above?*
Based on the results at http://map.sba.gov/hubzone/maps/ , do you live in a HubZone qualified tract?*
Can you provide evidence of residence at this address, such as a Drivers' License, utility bill, lease, or mortgage statement?*
The following questions are entirely optional.
To comply with government Equal Employment Opportunity / Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Gender
Race/Ethnicity

Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status
I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 1/31/2020
Why are you being asked to complete this form?

Because we do business with the government, we must reach out to, hire, and provide equal opportunity to qualified people with disabilities.i To help us measure how well we are doing, we are asking you to tell us if you have a disability or if you ever had a disability. Completing this form is voluntary, but we hope that you will choose to fill it out. If you are applying for a job, any answer you give will be kept private and will not be used against you in any way.

If you already work for us, your answer will not be used against you in any way. Because a person may become disabled at any time, we are required to ask all of our employees to update their information every five years. You may voluntarily self-identify as having a disability on this form without fear of any punishment because you did not identify as having a disability earlier.

How do I know if I have a disability?

You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition.

Disabilities include, but are not limited to:

  • Blindness
  • Deafness
  • Cancer
  • Diabetes
  • Epilepsy
  • Autism
  • Cerebral palsy
  • HIV/AIDS
  • Schizophrenia
  • Muscular dystrophy
  • Bipolar disorder
  • Major depression
  • Multiple sclerosis (MS)
  • Missing limbs or partially missing limbs
  • Post-traumatic stress disorder (PTSD)
  • Obsessive compulsive disorder
  • Impairments requiring the use of a wheelchair
  • Intellectual disability (previously called mental retardation)
Please check one of the boxes below:

YES, I HAVE A DISABILITY (or previously had a disability)
NO, I DON’T HAVE A DISABILITY
I DON’T WISH TO ANSWER

Your Name Today's Date
Reasonable Accommodation Notice

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.


iSection 503 of the Rehabilitation Act of 1973, as amended. For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.


PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.