Senior UAM Analyst Support (Secret required)

Founded in 2003, IT Concepts’ core values – customer-centricity, teamwork, driven to deliver, innovation, and integrity – ensure we work together to be the best, realize objectives, and make a positive impact in our communities. We intentionally created and sustain our ITC culture that embraces change, experimentation, continuous learning, and improvement. We bring our design thinking problem-solving approach that challenges assumptions, prioritizes curiosity, and invites complexity to deliver innovative, efficient, and effective solutions. As we continue to grow in the support of our government customers, we are looking for driven and innovative individuals to join our team.

IT Concepts is seeking a Sr. UAM Analyst Support who will support several projects at a federal agency. The position is located in Woodlawn, MD. The qualified candidate should have strong analytical, problem-solving, and communication skills with sharp attention to detail.

Job Responsibilities:

• User Activity Monitoring (UAM) Senior Analyst Support:
• Analyze large complex datasets, develop rules for detecting and deterring risk, and make accurate determinations.
• Assist with the completion of UAM ATO artifacts, configuration baselines, and validation testing of UAM rules and alert signatures.
• Conduct case support to agency insider threat activities and requirements pursuant to investigations, administrative or security inquiries, security risk assessments, or other adjudicative assessments.
• Within the boundaries of agency policies, monitor all types of network activity using the agency-provided UAM and User Behavior Analytics (UBA) tools to identify and report on viable response options ranging from administrative actions, security violations or infractions, and referrals to the OIS Insider Threat Team Lead.
• Process Insider Threat UAM alerts and preserve the activity logs for potential future investigational viability and/or operational capability and ensure the availability, and compliance with data privacy and security regulations, while preserving the privacy and civil liberties of the SSA workforce.
• Perform after-action reviews of past system alerts, to determine the scope, urgency, and potential impact, identify the specific vulnerability, and make recommendations that enable the development of future remediation and mitigation efforts.
• Assist in conducting Insider Threat risk assessments that involve performing vulnerability analysis to identify potential susceptibility to insider threat activity and determine the possibility of how the network infrastructure may be exploited by attackers.
• Use historical incident data to identify specific vulnerabilities and use statistical comparisons to previous activities, and lessons learned, and recommend next steps to update Insider Threat standard operating procedures and publish insider threat defense techniques, guidance, and reports on incident findings to the insider threat PM.
• Collaborate with and provide expert technical support to the agency Security Operations Center defense technicians to resolve insider threat incidents and provide recommendations to address and assist with resolution of any issues identified.
• Prepare and present analysis, in the form of briefings and reports to the Insider Threat project leads. Briefings and reports will address all investigative and analytical findings and be suitable for publication to stakeholders.
• Conduct insider risk mitigation activities, and preliminary inquiries, and provide support to external stakeholder requests upon approval by the SSA.
• Provide monitoring, analyzing, and reporting on non-classified cyber activity, trends, and incidents that may or often rise to the level of incident threats threatening the confidentiality, availability, and integrity of the SSA network, which has the potential of posing a national security risk beyond the SSA and to the entire Federal Government enterprise.

Requirements

• Minimum 10 years of relevant experience is required with a Bachelor’s Degree.

• 3 years of experience is required with Forcepoint.
• Provide ongoing immediate supervision of the User Activity Monitoring (UAM) analysts, reviews, initial analysis, and recommendations of Insider Threat case reports before forwarding to the PMO for action.

Clearance:

• Active DOD Secret Clearance required to be considered for the position.

Preferred Certifications:

• Ability to obtain certifications in ForcePoint policy writing, extensive scripting experience, Network Engineering, Microsoft Desktop Administrator, or equivalent certifications
• Security+CE, CCNA Security, CySA+, GICSP, GSEC, CND or SSCP

Benefits

The Company

We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.

We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015) and two CMMI ML 3 ratings (DEV and SVC).

Industry Recognition

Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.

Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner – Mid-Size Companies, Companies Owned by People of Color; Department of Labor’s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award

Benefits

We offer great benefits – Competitive Paid Time Off, Medical, Dental and Vision Insurance, Identity Theft Protection, Legal Resources Coverage, 401(k) with company matching with NO vesting period.  ITC Health benefits have a $0 premium for certain plans for eligible employees.

We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development.  Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.

We work hard, we play hard. ITC is committed to incorporating fun into every day. We dedicate funds for activities – virtual and in-person – e.g., we host happy hours, holiday events, fitness & wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy.

AAEO & VEVRAA

ITC is an Affirmative Action/Equal Opportunity employer and a VEVRAA (Vietnam Era Veterans' Readjustment Assistance Act) Federal Contractor. As such, any personnel decisions (hire, promotion, job status, etc.) on applicants and/or employees are based on merit, qualifications, competence, and business needs, not on race, color, citizenship status, national origin, ancestry, sexual orientation, gender identity, age, religion, creed, physical or mental disability, pregnancy, childbirth or related medical condition, genetic information of the employee or family member of the employee, marital status, veteran status, political affiliation, or any other factor protected by federal, state or local law.

ITC maintains a strong commitment to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.

As a part of our VEVRAA compliance efforts, ITC has established an affirmative action plan that outlines our commitment to the recruitment, hiring, and advancement of protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.

We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary, and it will not impact your eligibility for employment.

Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.

How to Apply

To apply to IT Concept Positions- Please click on the: “Apply for this Job” button at the bottom of this Job Description or the button at the top: “Application.”  Please upload your resume and complete all the application steps. You must submit the application for IT Concepts to consider you for a position.  If you need alternative application methods, please email [email protected] and request assistance.  

Accommodations

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email [email protected].