DescriptionWe are seeking a Data Scientist/Analyst to apply strong cybersecurity, data science, Defensive Cyber Operations (DCO), and networking domain knowledge to support and train cyber operational teams to leverage intelligence and coordination applications and tools. Regular cyber hunt activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform. Regular data science activities consist of operational research, statistical analysis, hypothesis testing, model building/testing, and communicating results using visualizations. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, and system training for end users.
- Champion Threat Awareness Sharing Capability (TASC) suite of applications
- Conduct threat hunt operations on assigned Big Data Platform(s) - BDP (JCRS-D)
- Present threat hunt findings through live - interactive sessions either in person or remote
- Assist customer(s) with their threat hunting operations
- Collaborate with customers to define requirements and operational gaps to maximize satisfaction
- Serve as an advisor to the customer on data enrichment and functions to enhance customer experience
- Perform quality assurance checks on data that is resident on the platform
- Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customer(s)
- Support analytic requests (data query search, visualizations, dashboards, etc.)
- Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations
- Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities
- Provide real-time customer support during normal working hours
- Maintain situational awareness of emerging cyber threats for possible action and notification to impacted customer(s)
- Provide documentation on data feeds and deliverables
- Support demonstration requests to showcase various capabilities of the platform
- Additional duties as assigned
ClearanceA current TS/SCI level U.S. Government Security Clearance is required; U.S. Citizenship required.
ExperienceMinimum ofnine (9) + years of experience in cybersecurity operations-related fields with a Bachelor's in Information Technology, Cyber Security, or related field; or 7 years relevant experience with a Master's in related field; or High School Diploma or equivalent and 13 years relevant experience
Required skills:
- Experience with the DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components
- Presenting analysis to stakeholders of varying data knowledge levels
- Proficient in various query languages (SQL, KQL (Kusto))
- Python experience, and bonus for experience using Jupyter notebooks
- Experience with dashboarding/visualizations (Power BI, Superset)
- Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)
- Cyber Hunt methodologies and techniques
- SIEMs (e.g., Splunk, Q-Radar, ELK)
- SOARs (e.g., Sentinel, CORTEX, X-SOAR)
- Developing and deploying threat detection signatures
- Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)
- Recognizing and categorizing types of vulnerabilities and associated attacks
- Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)
- Network traffic analysis methods (e.g., TCP-DUMP, Wireshark, Zeek)
- Familiar with cyber attack stages (MITRE ATT&CK) and incident response and handling methodologies
- Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
- Strong interpersonal skills and the ability to interact effectively with others. Ability to speak in a public forum
- Excellent organizational skills and attention to detail
- Ability to work independently and as part of a team
- Support training events either in-person or virtually
- Strong writing skills
- Must be able to travel up to 40% of the time CONUS and OCONUS
- Must be able to work on customer site in Fort Meade, MD 5 days/40 hours a week. Flexibility to adapt to changes is needed in this customer-facing role
Desired skills:
- Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification
- DoW SOC experience is a huge plus
- Prior experience or familiarity with Big Data Platforms or Data Lake architectures is a plus
BenefitsErias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience, is $150,000 - $275,000.
Wealth Benefits:- Above Market Hourly Pay
- 11% Roth or Traditional 401k with Immediate Vesting and Deposit
- Spot Bonuses for Assisting with Business Development and Company Growth
- Professional Development Bonuses for Certificates and Degrees
Health Benefits:- Company-subsidized Medical Coverage
- 100% Company Paid Vision and Dental Coverage
- 100% Company Paid Long Term Disability, Short Term Disability, and Group Life Insurance
- Monthly Wellness Reimbursement
Happiness Benefits:- Paid Time Off with Flexible Work Schedules and Birthday Off
- Amazon Prime Membership andMonthly Internet Reimbursement
- Technology and Productivity Allowance for Equipment and Supplies
- Morale Building and Company Events to Celebrate our Successes and Build our Community
- Onboarding and Annual Swag
- Company-Paid Professional Development and Training
