Counterintelligence & Security Risk Analyst

ABOUT THE TEAM

The Counterintelligence (CI) and Security Investigations Team’s safeguards Anduril’s workforce and supply chain by proactively identifying risk, mitigating threats and delivering actionable investigative insights. The team helps ensure our security environment remains vigilant and resilient so that our strategic interests are preserved. We are committed to anticipating and mitigating risks and threats enabling Anduril to innovate and operate confidently in a dynamic global environment.

ABOUT THE POSITION

Anduril is seeking a professional to support the CI and Security Investigations team in a unique opportunity to help strategize, socialize and implement a CI and security risk program that requires significant critical thinking, creativity, complex problem solving and interpersonal skills, as well as the ability to work across a rapidly growing, global, dynamic organization to identify and mitigate threats. The Counterintelligence & Security Risk Analyst Lead is responsible for analyzing threats from nation state actors and insiders affecting Anduril's workforce, technologies and supply chain globally. The role will involve the development and support of analytic efforts and work-streams that integrate across key business processes and stakeholders, spanning people vetting, supplier and vendor risk, and enterprise CI analysis, to enable rapid mitigation and informed decision making. This position will leverage a variety of internal and external data sets and tools to develop a robust understanding of the threat environment. The Analyst must be a self-starter that can operate independently and be responsive to fast paced and dynamic operational and threat environments, and must possess a deep understanding of CI, intelligence analysis, risk management, and a demonstrated ability to analyze and communicate complex risks and threats.

WHAT YOU’LL DO

• Support the development of CI analysis tailored to the defense industry's unique threats and requirements, spanning workforce, technology and supply chain risk.
• Analyze threats from nation state actors, reviewing data from multiple sources to identify anomalous behaviors and other indicators.
• Execute workforce, visitor and supplier vetting initiatives, conducting thorough risk assessments and initial investigations to ensure Anduril is engaging with trusted people and vendors.
• Support a repeatable, scalable process for vetting of candidates, visitors, suppliers and vendors, and continuously monitor existing relationships for emerging risks.
• Coordinate with federal agencies, including the Department of Defense (DoD), Intelligence Community (IC), and Federal Law Enforcement, to access relevant threat information and stay current on evolving adversary tactics, techniques and procedures.
• Establish and leverage collaborative partnerships across internal stakeholders, including product, supply chain, legal, HR, and InfoSec teams, to identify data necessary to support robust research and analysis.
• Produce tailored and strategic risk assessments, detailed reports and presentations on findings, case studies, threat assessments, and recommended actions for multiple audiences to include senior leadership.
• Develop and implement analytic methodologies to assess counterintelligence, supplier and people related risks.
• Provide analytic support to investigations.
• Support the development of procedures, processes, risk frameworks and documentation that comply with government regulations and contractual obligations, and produce key metrics for leadership on a recurring basis.
• Monitor, analyze and communicate trends in people or supplier risk and nation state-related risk and threats to help shape vetting and mitigation initiatives.
• Support the development of training and awareness materials and present tailored briefings to internal audiences.
• Travel as needed to support risk assessments at various Anduril site locations or external events.

REQUIRED QUALIFICATIONS

• Bachelor's or Master's degree in Security or Intelligence Studies, Political Science, Criminal Justice, or a related field.
• 8 years of relevant work experience in CI analysis, intelligence operations or analysis, or people and supplier risk vetting, assessing complex threats from nation state actors and other nation state-related risk.
• Experience conducting risk and threat assessments and presenting analysis to inform executive decision making.
• Demonstrated ability leveraging multiple data sets and tools to support complex research and analysis, as well as developing risk assessments and risk mitigation recommendations.
• Experience conducting public record research and investigations (e.g., criminal, civil, financial, corporate, property, licensing, or court records) in support of people and supplier vetting, or CI-related assessments.
• Ability to synthesize public record findings with open-source and other data sets to assess credibility, relevance, and risk, and communicate findings to technical and executive stakeholders.
• Experience with CI risk assessment methodologies and CI threat analysis.
• Experience leveraging critical thinking skills to creatively solve complex problems and produce analysis and recommendations in a fast-paced environment.
• Demonstrated understanding of the intelligence threats facing industry.
• Familiarity with relevant laws, regulations, and standards governing defense industry security and the requirements of U.S. security clearance holders.
• Excellent critical thinking, collaboration and interpersonal skills, with a proven ability to effectively analyze and communicate complex risks.
• Possess an active security clearance.

PREFERRED QUALIFICATIONS

• Understanding of ITAR/EAR regulations, compliance requirements, and government contract requirements related to the supply chain.
• Experience conducting CI and security related risk and threat assessments in government and private industry.
• Previous experience with people-related and supplier-related vetting initiatives in a defense contractor environment.
• Strong familiarity with people vetting, investigative, and supply chain risk management software and tools.
• Formal analytic training and/or certifications.
• Experience designing and executing CI/Security training.
• Prior experience partnering with legal, HR, and InfoSec teams to bring about positive outcomes and facilitate robust processes.