Insider Threat Security Engineer

PKH Enterprises is seeking qualified individuals to support both government and private-sector clients in the development and implementation of insider threat and asset protection programs. Qualified candidates should have knowledge of insider threat program elements, governance models and overall program operations. Candidate should have an understanding of Insider Threat Architecture, key systems in use, and approaches to technical implementation. Experience with implantation, operation, maintenance of a User Activity Monitoring and User Event Behavior Analysis tool/platform.

Responsibilities:

· Provide consulting support services to government and private-sector clients related to the development of insider threat programs.

· Conduct evaluations of existing insider threat program elements.

· Evaluate and recommend both technical and non-technical solutions to detect and respond to potential insider threats.

· Must troubleshoot and manage network infrastructure with the first four layer of the Open Source Interconnection (OSI) model.

· Evaluate and establish program elements to support insider threat prevention, detection and response.

· Conduct risk management assessments of critical assets and develop strategies for their protection.

· Evaluate technical products for their use in Insider Threat Programs and define specific architecture for the program. 

· Understand technology implementation to build basic initial operating capability and to enhance that architecture over time.

· Ability to understand a diverse range of systems and develop ingest plans and analytics to obtain necessary triggers.

Minimum Qualifications:

· Bachelor's degree in Information Technology, Engineering or related technology field.

· Minimum of 5 years of experience managing routers, switches and firewalls.

· Experience implementing and working within virtual environments.

· Experience addressing and managing sources of disruption.

· Functional knowledge of MPLS-VPN VRF routing and forwarding.

· Must be able to obtain and maintain a security clearance.

Preferred Qualifications:

· Working knowledge of user activity monitoring tools. (Please specify)

· Experience with Forcepoint UAM tools.