Insider Threat Analyst (Remote)

Date Posted:

Country:

Location:

Position Role Type:

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity. The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.   

The following position is to join our RTX Enterprise Services team:

Role Overview: 

Enterprise Services (ES) Cybersecurity has an immediate opening for a qualified insider threat analyst to join RTX Cyber Defense reporting to the Associate Director of Cyber Insider Threat Operations. As an insider threat analyst, you will be responsible for supporting the analysis, monitoring and triage of alerts stemming from potential insider threats.

What You Will Do:

The ideal candidate shall perform specific activities that include, but are not limited to the following: 

• Perform log analysis to detect anomalies, leveraging expertise in security operations tools to monitor and safeguard sensitive data. Utilize behavioral analytics and endpoint security solutions to identify and investigate unusual patterns.
• Monitor potential data exfiltration points using data loss prevention tools and other security solutions to detect and prevent unauthorized transfers.
• Apply Open-Source Intelligence (OSINT) techniques to gather and analyze publicly available information related to insider threats.
• Identify insider threat trends and patterns to assist content teams in the development of new detection rules and models.
• Articulate the implications of the risks relative to insider threats and educate team members, peers and stakeholders on the potential impacts.
• Review data, alerts and behaviors to identify potential concerns from multiple angles, gather information and understand and articulate information gaps needed to inform decisions.
• Work independently and with teams to define and complete analysis activities.
• Document findings in a manner that technical and non-technical stakeholders understand and can articulate findings to leadership and peers.
• Perform initial analysis on data from systems to identify unexpected or malicious activity across channels while understanding how activity fits into the threat landscape.
• Assist in building processes, procedures and training for the insider threat team.
• Collaborate with …