User Access Monitoring Analyst - 100% Remote work at Confidential company

User Access Monitoring Analyst

Clearance: Must be US Citizen. Having Public Trust clearance is preferred, but not required.

*This is a Remote 8 hours a day job, 9:30-2:30pm EDT being the core hours that the candidate must be on-line.

*This is a full time permanent, W2 position.

Salary Range: $84,901.00 To $113,299.00 Annually

At TAYS, every team member is vital. We recognize and celebrate diverse insights, believing they fuel our innovative spirit. We are not just tech-savvy; we are people-centric. You will have a voice. Your unique perspective will help us to solve complex problems, and we welcome your ideas. Here, you will collaborate closely with our clients, forging lasting relationships. We are on a quest for the brightest minds who relish technical challenges. If you are ready to contribute to our vibrant high-tech community, high touch let's uncover possibilities together!  

Opportunity:  

TAYS is seeking an experienced User Access Monitoring Analyst to join our dynamic team! The successful candidate will possess deep expertise in ForcePoint as well as User Access Monitoring and Data Loss Prevention. This role requires a strong understanding insider threat monitoring, the ability to identify, analyze, and report anomalies. This role will also be responsible for ensuring compliance with relevant security policies and regulations. This position is based in Woodlawn, MD, and requires an experienced multi-tasker with robust analytical, problem-solving, communication and people skills.

Primary Responsibilities:  

• Conduct data triage of anomalous events collected by approved User Access Monitoring (UAM), Data Loss Prevention (DLP) and other client network and endpoint monitoring tools. Elevate and investigate anomalous events of concern
• Within the boundaries of agency policies, monitor all types of network activity using the agency provided UAM and User Behavior Analytics (UBA) tools to identify and report on viable response options ranging from administrative actions, security violations or infractions, and referrals to the OIS Insider Threat Team Lead
• Provide the initial discovery and analysis of UAM alerts applying intelligence community analytic standards and critical thinking prior to submitting to the Insider Threat Project Lead for the purpose of determining the potential referral decisions/actions
• Provide timely notification to designated personnel if a potential insider anomaly is detected. Draft comprehensive analytical and investigative reports and referrals that highlight activity or behavior that may be indicative of an insider threat/risk to SSA
• Process Insider Threat UAM alerts and preserve the activity logs for potential future investigational viability and/or operational capability and ensuring the availability, compliance with data privacy and security regulations, while preserving the privacy and civil liberties of the SSA workforce
• Perform after action reviews of past system alerts, to determine scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable development of future remediation and mitigation efforts
• Collaborate with and provide expert technical support to the agency Security Operations Center defense technicians to resolve insider threat incidents and provide recommendations to address and assist with resolution of any issues identified

Minimum Qualifications:  

• Bachelors Degree in a technical field or relevant work experience
• 5+ years of relevant work experience
• 2+ years of experience with Forcepoint
• Experience with UAM, DLP and SIEM software
• Ability to obtain and maintain a Public Trust clearance

Desired Qualifications:  

• Active Public Trust clearance
• Prior SOC experience
• Ability to obtain certifications in Forcepoint policy writing, extensive scripting experience, Network Analysis, Microsoft Desktop Administrator, or equivalent certifications
• CompTIA Security+CE
• CompTIA CySA+
• CCNA Security
• GICSP Certification
• GSEC Certification
• CND Certification
• SSCP Certification

Why TAYS is the Perfect Place for You:  

• Flexibility: Enjoy a work-life harmony with our flexible working options
• Remote Work: While our heart is in Baltimore, most of our roles support remote work
• Benefits: Competitive packages, including tuition reimbursement
• Leisure: Generous PTO, including 11 federal holidays and 2 floating holidays
• Team Events: Quarterly gatherings for team bonding or community service  
• Military Friendly: We value the dedication and discipline of veterans and service members and urge them to apply  

Commitment to Diversity:  

TAYS Inc. is an equal opportunity employer. We consider all qualified applicants for employment without regard to race, color, national origin, religion, creed, sex, sexual orientation, gender identity, marital status, parental status, veteran status, age, disability, or any other protected class