Senior Cyber Analyst

Intelligent. Dynamic. Resilient. 

Everfox, formerly Forcepoint Federal, has been defending the world’s most critical data and networks against the most complex cyber threats imaginable for more than 25 years. As trailblazers in defense-grade, high assurance cyber security, we have been leading the way in developing and delivering innovative cyber security technology. We protect data wherever it resides. Our unwavering dedication and commitment to our customers and the critical missions they serve are what set us apart. We are dynamic, vigilant, and proactive in everything we do. Our suite of cross domain, threat protection and insider risk solutions empower governments and enterprise organizations to use data safely - where and however their people need it. At Everfox, we innovate, we invest, we achieve. We protect what matters most to our customers. And we offer protection like no other. We do all of this so our customers can focus on what matters most… their mission.

Job Title: Senior Cyber Analyst

Primary Work Location*: San Antonio, Texas

Position Summary:
Everfox is one of the world’s most significant private cybersecurity software and professional service companies. As a Senior Cyber Analyst at Everfox, you’ll join our growing professional services engineering team. The work is challenging and provides support to a single customer. Supporting this customer will require you to troubleshoot and resolve various issues independently. While you’ll have access to other engineering staff, you’ll be expected to be a self-starter and multitask while communicating effectively with the customer and Everfox management. The ideal candidate will have hands-on experience providing administrator or SME-level support for endpoint security solutions, such as HBSS, Tanium, Digital Guardian, etc.

What You'll be Doing:
Many job listings provide a wide range of confusing and often vague terms. At Everfox, we take a different approach by spelling out the key things you’ll be responsible for.

• Triage data from User Activity Monitoring (UAM) Tools and other analytics sources to decipher trends, uncover anomalies, and discern obscure patterns.

• Monitor and analyze political, military, and economic developments within assigned areas of interest (AOIs).

• Proactively produce Insider Threat leads, documenting events such as computer misuse, policy violations, counterintelligence concerns, foreign influence, financial stressors, and threats to individuals.

• Generate Insider Threat Referrals or investigative leads covering computer misuse, policy violations, counterintelligence concerns, foreign influence, financial stressors, threats, Continuous Evaluation (CE), adjudicative, and other insider threat concerns.

• Conduct special analytical projects as directed by leadership.

• Collaborate with internal and external investigative, intelligence community (IC), and law enforcement agencies as required.

• Support policy and procedure development, contributing to company-wide initiatives. Communicating with customer and Everfox management daily, providing detailed activity summaries and in-depth trip reports where applicable.

• Assisting in the lifting/racking and cabling of physical hardware. **

• Other duties as assigned***

Things You Must Have to Apply:

• An active (currently in use) – TS with SCI or SCI eligibility within two years from last use.

• A bachelor’s degree in cyber security, intelligence, or equivalent education and/or work experience.

• At least one DoD 8140 Cyber Workforce Qualification Program certification, at IAT level II (2) or higher.

• The ability to obtain the appropriate work authorizations required under U.S. ITAR or EAR regulations from the applicable U.S. government agency.

• Certified Counter-Insider Threat Program - Fundamentals (CCITP-F) or willing to obtain within 12 months.

• 8+ years’ experience performing the following tasks:

• Cyber analysis or intelligence, proficient with data analytics tools and databases (e.g., Everfox (formerly Forcepoint), Analyst Notebook, DTEX, etc.).

• Analytical problem-solving skills with a background in operations related to insider threats, counterintelligence investigations, or counterespionage.

• Familiarity with data analytics tools used for Insider Threat information collection on computer networks or knowledge of other Insider Threat risk scoring data analytics tools/programs.