Cyber Analyst 3

Primary Work Location*: San Antonio, Texas

Position Summary:
Everfox is one of the world’s most significant private cybersecurity software and professional service companies. As a Cyber Analyst III at Everfox, you’ll join our growing professional services engineering team. The work is challenging and provides support to a single customer. Supporting this customer will require you to troubleshoot and resolve various issues independently. While you’ll have access to other engineering staff, you’ll be expected to be a self-starter and multitask while communicating effectively with the customer and Everfox management. The ideal candidate will have hands-on experience providing administrator or SME-level support for endpoint security solutions, such as HBSS, Tanium, Digital Guardian, etc.

What You'll be Doing:
Many job listings provide a wide range of confusing and often vague terms. At Everfox, we take a different approach by spelling out the key things you’ll be responsible for.

• Triage data from User Activity Monitoring (UAM) Tools and other analytics sources to decipher trends, uncover anomalies, and discern obscure patterns.

• Monitor and analyze political, military, and economic developments within assigned areas of interest (AOIs).

• Proactively produce Insider Threat leads, documenting events such as computer misuse, policy violations, counterintelligence concerns, foreign influence, financial stressors, and threats to individuals.

• Generate Insider Threat Referrals or investigative leads covering computer misuse, policy violations, counterintelligence concerns, foreign influence, financial stressors, threats, Continuous Evaluation (CE), adjudicative, and other insider threat concerns.

• Conduct special analytical projects as directed by leadership.

• Collaborate with internal and external investigative, intelligence community (IC), and law enforcement agencies as required.

• Support policy and procedure development, contributing to company-wide initiatives. Communicating with customer and Everfox management daily, providing detailed activity summaries and in-depth trip reports where applicable.

• Assisting in the lifting/racking and cabling of physical hardware. **

• Other duties as assigned***

Things You Must Have to Apply:

• An active (currently in use) – TS with SCI or SCI eligibility within two years from last use.

• A bachelor’s degree in cyber security, intelligence, or equivalent education and/or work experience.

• At least one DoD 8140 Cyber Workforce Qualification Program certification, at IAT level II (2) or higher.

• The ability to obtain the appropriate work authorizations required under U.S. ITAR or EAR regulations from the applicable U.S. government agency.

• Certified Counter-Insider Threat Program - Fundamentals (CCITP-F) or willing to obtain within 12 months.

• 8+ years’ experience performing the following tasks:

• Cyber analysis or intelligence, proficient with data analytics tools and databases (e.g., Everfox (formerly Forcepoint), Analyst Notebook, DTEX, etc.).

• Analytical problem-solving skills with a background in operations related to insider threats, counterintelligence investigations, or counterespionage.

• Familiarity with data analytics tools used for Insider Threat information collection on computer networks or knowledge of other Insider Threat risk scoring data analytics tools/programs.

• In-depth understanding of intelligence regulations, oversight principles, geospatial intelligence products, capabilities, and missions.

• Superior writing and briefing skills with the ability to publish well-analyzed reports.

• Working with onsite government, contractor, or subcontractor staff to resolve issues with onsite products as the first line of support.

• Communicating with customer and Everfox management daily, providing detailed activity summaries and in-depth trip reports where applicable.

*Primary Work Location
For customer privacy and security, the exact customer location is not shown via the attached link, nor is the customer mentioned by name. The customer's name and location will be shared upon starting employment and indoctrination with Everfox.

**Physical Demands
This is primarily a sedentary role, but you may be required to assist with installing and racking servers, network equipment, etc., related to the products running at the customer location.

***Other Duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required of the employee for this job. Duties, obligations, and activities may change at any time as determined by the customer or Everfox management