Lead Data Scientist - Security Knowledge Graphs & AI

Test Triangle Ltd; Leeds; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

Test Triangle Ltd in Leeds is seeking a Lead Data Scientist to own the design, engineering, and deployment of Security Knowledge Graphs that connect telemetry, assets, vulnerabilities, threats, and incidents into trusted security intelligence for operations.

The role is hands-on and strategic, combining data science, graph engineering, cybersecurity analytics, and semantic modeling to enable attack-path analysis, threat investigation, and GraphRAG.

Qualifications

• Knowledge graphs, ontology design, and graph modeling.
• Proficient with graph platforms (Neo4j, Cypher; others listed).
• Graph ML, embeddings, link prediction, and anomaly detection.

Responsibilities

• Design graph architecture and ontology; define entity/relationship models.
• Build production-grade graph ingestion and transformation pipelines.
• Develop entity extraction, identity resolution, deduplication, and schema mapping.
• Model assets, users, privileges, vulnerabilities, incidents, and threats.
• Implement graph analytics for attack paths, blast radius, and lateral movement.
• Develop graph algorithms and ML models (centrality, clustering, anomaly detection, GNNs).
• Design GraphRAG and knowledge-grounded security assistants with retrieval and citations.
• Collaborate with SOC, threat intel, IAM, vulnerability management, cloud security, architecture, and data engineering teams.
• Lead design reviews, coding standards, model validation, observability, and production readiness.
• Mentor data scientists and engineers; oversee prototypes and customer demos.

Skills

Knowledge graphs

Neo4j/Cypher

GDS/Graph ML

Python/SQL

Spark/Databricks

Cybersecurity

MITRE ATT&CK

GenAI/GraphRAG

MLOps

Tools

Neo4j

Amazon Neptune

TigerGraph

Azure Cosmos DB

ArangoDB

JanusGraph

Job description

Test Triangle Ltd in Leeds is seeking a Lead Data Scientist to own the design, engineering, and deployment of Security Knowledge Graphs that connect telemetry, assets, vulnerabilities, threats, and incidents into trusted security intelligence for operations.

The role is hands-on and strategic, combining data science, graph engineering, cybersecurity analytics, and semantic modeling to enable attack-path analysis, threat investigation, and GraphRAG.