Job offer
**Insider Threat Intelligence Analyst**
The Insider Threat Intelligence Analyst is responsible for conducting insider threat investigations and analyzing state-sponsored espionage activities. The candidate should have 5+ years of experience in cybersecurity or US intelligence.
Job description
Tasks
- Identify Priority Intelligence Requirements (PIRs) for state-sponsored espionage and insider threat activities.
- Collects, analyzes, and processes intelligence reporting on state-sponsored intelligence operations targeting the US and Global Financial Sector.
- Lead development of the Insider Monitoring program.
- Collaborate across organizations, to include with Insider Hunting, Cyber Threat Hunting, and Insider Risk teams.
- Engage with government partners and intelligence-sharing organizations.
- Support Insider Hunt and Threat hunt operations to identify potential Insider Threat techniques, tactics, and procedures (TTPs)
- Support Purple Team operations to emulate nation-state insider threat TTPs
- Support Detection Engineering to tune security controls and detections for Insider Threat activity.
- Supporting technical investigations and collaborates with the Insider Hunt team to identify malicious/risks behaviors to be escalated.
Requirements
Required skills:
- 5+ years of experience in cybersecurity or the US Intelligence Community, preferably in Foreign Intelligence Operations, Human Intelligence (HUMINT), Cyber Espionage, and Counter-intelligence operations.
- Initiate and carry insider threat investigations end-to-end.
- Strong understanding of Nation-state Insider Threat activities, their TTPs, plans, intentions, and motivations.
- Understanding of Nation-State Offensive Cyber Operations
- Understanding of Supply-Chain risks, particularly vendors and technology attributed to nation-state intelligence activities.
- Ability to drive new and complex insider intelligence projects to completion.
- Communicates and presents findings to various stakeholders and consumers, to include Senior executives.
Bevorzugte Fähigkeiten:
- Completed and certified in an US Military or US government Source Operations Course
- Experience as a Counter-Intelligence Agent or Counter-Intelligence Referent
- Completed certifications from the Joint Counter-Intelligence Training Academy (JCITA)
- Understanding of HUMINT Technical Operations (HUMINT Tech Ops)
We offer
- Including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits.
- Northern Trust also provides a discretionary bonus program that may include an equity component.
Job details