UAM Analyst with Security Clearance

Are you an experienced, passionate pioneer in supply chain who wants a daily collaborative environment, think-tank feel and share new ideas with your colleagues - without the extensive demands of travel? If so, consider an opportunity with Deloitte under our Project Delivery Talent Model. Project Delivery Model (PDM) is a talent model that is tailored specifically for long-term, onsite client service delivery. PDM practitioners are local to project locations, minimizing extensive travel, and provides you with a full career path within the firm. Work you'll do/Responsibilities This position is a cross-functional role that will help drive user activity monitoring capabilities, program operations and maturity supporting the client. As a User Activity Monitoring analyst, the practitioner will conduct analysis of complex and technical data sources, provide guidance on anomalous behavior, and mature insider threat capabilities through the continued development and enhancement of new and existing monitoring solutions. Role Description
oAssist in maturing an operational User Activity Monitoring cell, including the development of playbooks and workflows for monitoring potential insider risks
oImplement federal government and industry standards and best practices regarding insider threat programs
oAssist in the creation of a Gap Analysis on current User Activity Monitoring tools used in support of Insider Threat programs and make recommendations on industry best practices
o Conduct day-to-day analysis of complex and technical data sources to identify actions, behaviors, or incidents that may be indicative of risky activity or an insider threat/risk.
oDevelop and improve insider threat modeling that leverages multiple streams of security information i.e. Security Information and Event Management (SIEM), User Behavior Analytics (UBA), Data Loss Prevention (DLP), User Activity Monitoring (UAM), and automated solutions in place
o Routinely brief program leadership and key stakeholders regarding anomalous behavior, case development, and key findings leading to successful incident mitigation.
oLeverage industry-leading interpersonal skills to coordinate with client's business and technology leaders to develop and maintain programmatic solutions to insider threats.
oLead and assist in the investigation of all incidents involving anomalous behavior/insider threats. The Team: Our Supply Chain Networks team helps clients transform their value chains into competitive weapons. We drive efficiency, improve flexibility, and increase responsiveness through proactive insights and decision-making. We advise, implement, and operate transformational solutions that bring world-class supply network and operational capabilities to our clients. We provide operational know-how, digital technologies, advanced analytics, and industry-specific hybrid solutions to deliver unprecedented client value. Additionally, we improve operations, product, and material flow across the breadth of the value chain and create greater supply network synergy and value through M&A events. Qualifications: Required Bachelor's Degree.
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Must be able to obtain and maintain the required clearance for this role (TS/SCI).
4+ years of Intelligence/Investigation work experience in but not limited to the following areas: any/all of the intelligence disciplines, insider threat investigations, technical investigations, Cybersecurity ex: CSSP, financial fraud investigations.
Ability to travel up to 25% on average (1-2 days per week), based on the work you do and the clients and industries/sectors you serve.
Preferred Experience with User Activity Monitoring cell, including the development of playbooks and workflows for monitoring potential insider risks
Experience with the creation of a Gap Analysis on current User Activity Monitoring tools used in support of Insider Threat programs and make recommendations on industry best practices
Information for applicants with a need for accommodation: