Technical User Activity Monitoring (UAM) Specialist

Job Description

Job Description

Position: Technical User Activity Monitoring (UAM)Specialist

Work Location: Washington D.C

Reports to: Company Project Manager (PM)

Clearance Type: Top Secret/SCI

Advantage SCI seeks an experienced Local Hire Technical User Activity Monitoring (UAM) Specialist to perform moderately complex tasks related to supporting Counterintelligence Insider Threat Program, such as: conduct research and collection of complex and qualitative data from public sources, experts, and other sources; analyze and assess qualitative and quantitative data using statistical or other techniques; document methods, approaches, summaries, evaluations, and results; perform complex research relevant to the Counter-Insider Threat Program. 

Location: Primary place of performance will be on-site at U.S. Department of Transportation Headquarters, Washington, DC,

Description of Duties:

• Experience: Demonstrated capability or equivalent experience typically represented by a minimum of 5 years configuring and operating enterprise-level UAM, SIEM, or data analytics platforms.

• Review, prioritize based on threshold level, and document all insider threat situations
• Review and analyze Counter-Insider Threat Program data and files to identify anomalies and trends indicative of Insider Threat behavior.
• Review documented findings consisting of reports and supporting documents to validate operational effectiveness and accuracy of analytical assessments.
• Use Counter-Insider Threat Program operational checklists and analytical tools to complete assessments.
• Record minutes of Counter-Insider Threat Working Group meetings on a monthly basis and provide a report to the Case Manager
• Conduct weekly and monthly audits on Counter-Insider Threat investigations, processes, and records to ensure compliance with applicable regulations and operational efficiency
• Conduct a weekly audit on all open Counter-Insider Threat investigations and produce reports.
• Conduct monthly audits of all User Activity Monitoring processes and records, to include Counter-Insider Threat Program Intake Forms, IAW internal policies
• Conduct monthly audits of all Publicly Available Electronic Information (PAEI) processes and records IAW Counter-Insider Threat Instruction, and Counter-Insider Threat Program policies
• Produce an Annual Report using an HQ USINDOPACOM template highlighting analytical processes, inquiries, and results from Counter-Insider Threat Program weekly and monthly audits by April 5 each calendar year and provide report to the organization's Case Manager
• Coordinate facility visits with vendors, contractors, and other government employees, and assist with requesting base access with the Provost Marshall's Office (PMO) and the Visitor Control Center (VCC), when required to support Counter-Insider Threat operations.
• As needed, escort un-cleared vendors, contractors, and other government employees who may require access to the building for work related to the Counter-Insider Threat Program

• Experience: Demonstrated capability or equivalent experiencetypically represented by a minimum of 5 years configuring and operatingenterprise -level UAM, SIEM, or data analytics platforms

• Desired Experience: Demonstrated experience in identifying and triaging foreign intelligence threats, including suspicious academic solicitations, research data requests, and unauthorized technology transfer attempts.

• Must be able to read and interpret policies, guidance, and procedures.

• Must be able to type at least 40 words per minute, and skilled in Microsoft Windows applications. Applications include Word, PowerPoint, and Excel.

• Must have excellent communication skills, both written and oral, due to high level of interface with various levels of authority, rank, both military and civilian, Government service representatives, law enforcement, security, etc.

• Must be able to bend and lift a minimum of 20 pounds (lbs.) i.e., office supplies, peripherals, wiring/cables, etc.

• Must possess a driver's license and be able to drive from one facility to another within the Government site(s).

• Relevant technical certifications (e.g., CISSP,CEH, or vendor-specific UAM platform certifications). Experienced in draftingbehavioral analytics indicators and rule-sets