Data Analyst

M9 Solutions is seeking a Data Analyst to work on-site for a client located in Springfield or Lorton, VA. An active TS/SCI clearance is required.

Responsibilities

• Deliver comprehensive data analysis, review, and investigative support to the client, ensuring effective detection of potential threats and anomalous behavior across the enterprise.
• Examine, analyze, and search insider threat data to identify patterns, trends, and indicators associated with potential malicious activity or compromised behavior.
• Develop and produce actionable analytics to support the client in identifying individuals exhibiting harmful behavior toward themselves or the organization.
• Assess compromise vectors and behavioral indicators; extrapolate findings to identify similarly affected individuals across the enterprise.
• Provide technical strategies for threat containment and eradication of advanced insider threats.
• Collaborate with personnel to create advanced correlation rules and triggers within the Enterprise User Activity Monitoring (UAM) platform.
• Provide a timely response to critical/high UAM alerts (within 4 hours during normal business hours and provide after-hour support). Normal business hours will be defined as 6 am to 10 pm Monday - Friday, excluding weekends and scheduled holidays. Implement corrective actions to restore normal operations and prevent recurrence.
• Be available for on-call after-hours support as needed.

Required Skills and Qualifications

• Bachelor's degree in Data Analytics, Computer Science, Information Technology, Statistics, Cyber Security, or related field and 4+ years of prior relevant data science experience, or Master's degree with 2+ years of prior relevant experience.
• Current TS/SCI and must be a U.S. citizen.
• Minimum of 4 years demonstrated knowledge of proficiency in statistical analysis, data mining, and predictive modeling.
• Minimum of 4 years demonstrated knowledge of the intelligence cycle, processes, and organizations.
• Minimum of 4 years demonstrated experience creating advanced correlation rules and triggers within the Enterprise User Activity Monitoring (UAM) platform.
• Familiarity with tools for data manipulation and analysis.
• Experience with visualization tools to create dashboards and reports.
• Understanding of cybersecurity principles, including insider threat detection, network security, and data protection.
• Experience with user and entity behavior analytics (UEBA) tools or platforms.
• Strong SQL skills for querying databases and extracting relevant data.
• Ability to apply statistical methods to identify patterns, anomalies, or trends in data.
• Familiarity with machine learning for predictive modeling.
• Understanding of insider threat indicators, such as unauthorized access, data exfiltration, or policy violations.
• Experience with cloud-based tools (AWS or Azure) for data analysis is a plus.
• Have excellent written and verbal skills with the ability to deliver briefings to technical and non-technical stakeholders.
• Possess knowledge of current domestic and international threats to national security interests.
• Be adept at establishing networks with relevant security, personnel, and prevention stakeholders to foster program utilization.
• Be a self-starter capable of working independently to promote program goals.
• Advanced knowledge of User Activity Monitoring products and platforms.
• Advanced knowledge of Cybersecurity toolsets designed to support client mission activities.
• Experience with cloud-based tools (AWS or Azure) for data analysis is a plus.