You will serve as a GG-1805-13 Investigative Analyst in the Insider Threat Directorate at NAVAL INTELLIGENCE ACTIVITY in Suitland, MD, where you will detect and mitigate cyber and insider threats by providing advice and performing complex assignments involving the development, management, evaluation, implementation, or execution of User Activity Monitoring.

Duties

You will perform User Activity Monitoring system demonstrations, analyze audit data, and monitor alerts to identify anomalous/suspicious behavior and activities that present potential threats or security violations. You will execute multi-disciplined activities designed to counter threats posed by personnel with authorized access to classified and/or sensitive information and information systems. You will use cyber threat analysis, intrusion detection, computer forensics, data loss prevention technology, and/or enterprise audit analysis to develop and implement User Activity Monitoring mitigation strategies and processes. You will conduct analysis and provide feedback of audit data collected to monitor, detect, and mitigate cyber and insider threats. You will identify technical, financial, organizational, and/or policy limits or constraints program issues which affect Insider Threat User Activity Monitoring tools. You will coordinate with others to resolve audit alerts as required by documented guidance for monitoring, detection, response, and reporting activities. You will research and formulate recommendations and responses for internal and external requests for data, information, and metrics. You will visit Department of Defense and Intelligence Community agencies to discuss and collaborate on organizational initiatives.

Requirements

• Must be a US Citizen.
• Must be determined suitable for federal employment.
• Must participate in the direct deposit pay program.
• New employees to the Department of the Navy will be required to successfully pass the E-Verify employment verification check. To learn more about E-Verify, including your rights and responsibilities, visit e-verify.gov
• You must obtain and maintain a Top Secret security clearance and access to Sensitive Compartmented Information (SCI). Failure to do so may result in the withdrawal of an offer or removal. Indicate the level and date of your clearance in your resume.
• Successful completion of a pre-employment drug test (including marijuana) is required. A tentative offer of employment will be rescinded if you fail to report to the drug test appointment or pass the test. You will be subject to random testing.
• You must acknowledge in writing that you are accepting an appointment in the DCIPS (excepted service) which does not confer competitive status, prior to appointment.
• Within the Department of Defense (DoD), the appointment of retired military members within 180 days immediately following retirement date to a civilian position is subject to the provisions of 5 United States Code 3326.
• Males born after 12-31-59 must be registered for Selective Service.
• All Defense Intelligence positions under the Defense Civilian Intelligence Personnel System (DCIPS) are in the excepted service by specific statute, 10 U.S.C. 1601. This position is in the excepted service and does not confer competitive status.
• This position requires a periodic polygraph examination.
• This position may require a 2-year DCIPS trial period.
• This position is designated as a Cyber IT/Cybersecurity Workforce position. You must obtain and maintain the credentials as described in SECNAV M-5239.2 for specialty area 511 - Cyber Defense Analyst; see Additional Information section.
• Travel is required up to 25% of the time.

Qualifications

Your resume must demonstrate at least one year of specialized experience at or equivalent to the GG/GS-12 grade level or pay band in the Federal service or equivalent experience in the private or public sector, such as the following: 1. Provide advice and perform complex assignments involving the development, management, evaluation, implementation, or execution of User Activity Monitoring. 2. Monitor tools to identify anomalous/suspicious behavior and activities that present potential threats or security violations by personnel with authorized access to classified or sensitive information and information systems. 3. Analyze audit data to perform regular trigger refinement based on the analysis of evolving information and behavioral activities across the organization's network. 4. Use cyber threat analysis and Information Technology tools to assist with the development and implementation of User Activity Monitoring mitigation strategies, processes, policies, and procedures. 5. Develop briefings, information papers, and executive talking points for supervisors and senior leaders. Additional qualification information can be found from the following Office of Personnel Management website: https://www.opm.gov/policy-data-oversight/classification-qualifications/general-schedule-qualification-standards/#url=List-by-Occupational-Series

Education

N/A

Contacts

• Address NAVAL INTELLIGENCE ACTIVITY 4251 Suitland Rd Washington, DC 20395 US
• Name: Department of Navy EIC
• Email: [email protected]