Security Auditor
TMPC Inc
Tampa, FL 33621
Job details
Job Type
Contract
Full Job Description The Insider Threat Security (SEC) Auditor will be responsible for monitoring and assessing United
States Special Operations Command (USSOCOM) networks. Will assist the USSOCOM Insider
Threat team with network security incidents and will work with USSOCOM security offices (SMO
and SSO) as well as cyber security directorates. The Security Auditor will monitor network
security for classification security of intelligence information, unauthorized access to cyber and
network software, as well as access to sensitive programs within USSOCOM. Will be required to
assist other auditors if necessary when the insider threat team is directed by the command’s
counterintelligence, cyber network defense directorates or law enforcement agencies. Will
report all cyber incidents and analysis to the insider threat lead and stake holders within the
USSOCOM insider threat program.
Tasks
• Conduct audits of applicable government networks utilizing government procured software to
review and report on specific anomalies or usage concerns. The Contractor shall:
o Continually review and recommend changes to audit policies to better detect
anomalies.
• Complete Insider Threat database audit functions IAW User Activities Monitoring (UAM)
government SOPs and Insider Threat directives and report violations of trigger policies and/or
suspicious variations within the normal business days M-F, hours (6am-6pm). The Contractor
shall:
o Brief the UAM Sr. Auditor on a daily basis and discuss identified anomalous activity.
o Maintain a close working relationship with insider threat auditors from other disciplines
i.e....Counterintelligence and Information Assurance.
• Monitor applicable networks for specific threats and report via the UAM Sr. Auditor to the ITPM.
The Contractor shall:
o Participate in daily team meeting with auditors to ensure that all anomalous
observations are thoroughly discussed with applicable SMEs.
o Brief the UAM Sr. Auditor on a daily basis regarding the status of auditing activity.
• Report anomalous behavior to the ITPM, ITWG, J2X-CI, J62/J63, Security Management Office
(SMO), Special Security Office (SSO), Special Access Program (SAP), and other SOCOM entities,
as required The Contractor shall:
o Maintain a close working relationship with applicable Security, Information Assurance,
and CYBER Security directorates in order to execute the UAM reporting process in a
timely manner.
• Facilitate the synchronization and de-confliction of UAM auditing data with existing Information
Assurance and CYBER Security apparatuses within the USSOCOM SIE. The Contractor shall:
o Periodically meet with existing Security, Information Assurance, and CYBER Security
directorates to discuss the identification and referral process of anomalous events.
o Periodically brief applicable directorates on capabilities of the UAM auditing program.
o Provide input to USSOCOM directorates to facilitate the reporting and general UAM
auditing process.
Experience/Education Requirements
• Graduated from an accredited Security/Law Enforcement/Counterintelligence course
• Background and experience in security, familiar with DoD security directives, policies and
classification guidance
• Be willing to take and pass a DOD CI Polygraph
• BA/BS and two years’ IC and/or DoD experience, or 6 years relevant military intelligence,
information assurance and/or security experience
• Military or DoD experience working with intelligence, security, special operations, Inter-
Agencies
• Have completed 24 hours of Basic UAM Software Suite training within 1st year of contract (This
can be waved with the understanding that employee must attend the Basic UAM training
course)
• Must have at least 100 hours of operational experience using UAM Systems software Suite (Can
be waved due to on Site Training)
• Cyber certifications would be beneficial but not required for this position
• Certifications and training must be current and remain up to date throughout duration of
contract
Clearance Requirements
• Contractor team individual(s) supporting this task will be cleared at the TOP SECRET/SCI level at
the start of the task