Cyber Data Analytics Lead – 150281

Sovereign Technologies, LLC.; St. Louis, Northern (MO, KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Access to cutting-edge analytics tools

On-site role in St. Louis

Job summary

Sovereign Technologies, Inc. seeks a Cyber Data Analytics Lead to join our Enterprise Analytics Team in St. Louis. You will work with the Cyber Security Intelligence Team to advance predictive analytics for cyber security and reduce risk through data-driven insights.

Responsibilities include building advanced analytics with Data Scientists, onboarding new systems, and creating dashboards for intelligence and operations. Strong ML, SIEM, and cloud security knowledge are required.

Qualifications

• Bachelor’s degree in Computer Information Systems, MIS or CISSP preferred
• Equivalent education/experience will be considered
• 10 years relevant work experience if no degree
• 5–10 years information security experience
• ML/statistical analytics for anomaly/intrusion detection, etc.
• Advanced knowledge of network security concepts and procedures
• Expert-level knowledge of security architectures, requirements, and solutions
• Expert-level SIEM/log management/threat monitoring knowledge
• Strong logging knowledge across systems/applications
• Experience with Perl, R, Python and regex usage
• Experience in incident response, intrusion detection, and firewall tech
• Strong Windows/Unix/Linux/Mac OSX and VMware knowledge
• Cloud security knowledge (IaaS, SaaS)
• Knowledge of CRITs and TAXII/STIX formats
• Experience with NoSQL data
• Dashboard design experience
• Expert OSI model understanding
• Ability to learn complex environments
• Broad IT/interoperability understanding
• Team management experience preferred
• Excellent communication and documentation skills
• Ability to communicate with technical/non-technical staff
• Strong time management and multi-tasking
• On-call Tier 3 support and off-hours work

Responsibilities

• Collaborate with Data Scientists to develop advanced security analytics
• Identify opportunities with strategic partners to enhance cyber security analytics
• Define/onboard new systems into security analytics portfolio
• Lead creation of standard analytic dashboards for intelligence/ops teams
• Define logging standards for access and activity
• Define models for appropriate use of information systems
• Maintain framework to measure risks from visibility gaps
• Collaborate with external partners to share threat information
• Provide senior leadership with data-driven cyber security insights

Skills

Analytical thinking

Communication skills

Leadership experience

Learning agility

Machine learning analytics

Network security concepts

Security architecture

SIEM/log management

Threat monitoring

Scripting: Perl/Python/R

Regular expressions

Incident response

Windows/Linux/VMware

Cloud security

CRITs/TAXII/STIX

NoSQL databases

Dashboard design

OSI model expertise

Documentation

Cross-functional communication

Time management

On-call readiness

Education

Bachelor’s degree in Computer Information Systems/MIS or CISSP certification

Equivalent combination of education and experience

10 years relevant work experience without degree

Tools

SIEM

Log management

Threat monitoring systems

Perl

Python

R

NoSQL databases

CRITs

TAXII/STIX data formats

VMware

Job description

Categories: Information Security, Network Security, Security, Security Information & Event Management (SIEM)

Local St. Louis technology group seeks a Cyber Data Analytics Lead to join its Enterprise Analytics Team. The successful candidate will work closely with the Cyber Security Intelligence Team in IT to rapidly advance the use of Predictive and Prescriptive analytics for cyber security. We are seeking candidates with passion to learn and implement cutting-edge technology and methodologies, as well as the ability to work in both an individual and group environment. This position requires a highly-motivated individual who will relish working to improve the organization’s use of data and reduce risk as part of a business-aligned, threat-based cyber intelligence program.

Responsibilities Include:

• Work with Data Scientists to develop advanced analytic techniques for security analysis, including anomalies, intrusion detection, etc.


• Work with strategic partners to identify opportunities to further enhance cyber security using advanced security analytic techniques that preempt threats utilizing social, behavioral, geopolitical information, etc.


• Define and manage the process to onboard new systems into our security analytics portfolio.


• Lead creation of standard analytic dashboards for use by intelligence and operational teams.


• Work with information security personnel and application development teams to define and implement standards for access and activity logging to support our operations and security analytics practices.


• Define models that describe appropriate and inappropriate use of information systems.


• Maintain and enhance a framework for measuring risks associated with lack of visibility into system access and activity.


• Work with external partners – peer companies and security providers – to implement information sharing patterns and processes to identify shared threats and manage risks.


• Provide senior leadership teams with insight as information security transforms to implement a comprehensive data-driven, intelligence-based cyber security program.

Qualifications:

• Bachelor’s degree in Computer Information Systems, Management Information Systems or CISSP certification strongly preferred.


• Equivalent combination of education and experience will be considered. Candidates with no degree must have a minimum of 10 years relevant work experience.


• 5 -10 years of information security experience.


• Minimum 2years experience of utilizing Machine Learning statistical analytics techniques for anomaly, intrusion detection, social and behavioral analysis, etc.


• Advanced knowledge of network security concepts, best practices, and procedures.


• Expert-level knowledge of security architectural designs, requirements development, and solutions definition.


• Expert-level knowledge of Security Information and Event Management (SIEM), log management, or threat monitoring systems.


• Strong working knowledge of system and application logging.


• Experience with Perl, R, Python, and the use of regular expressions.


• Experience in Information Security Incident Response, intrusion detection, and firewall technologies.


• Strong working knowledge of Windows Client/Server, Unix/Linux Systems, Mac OSX, and VMware.


• Strong working knowledge in cloud solutions and security (e.g. Infrastructure as a Service, Software as a Service).


• Knowledge of collaborative research tools (e.g. CRITs) and data exchange formats (e.g. TAXII, STIX).


• Experience working with data in NoSQL database platforms.


• Experience with building and designing useful and actionable dashboards.


• Expert-level understanding of all layers of the OSI Model.


• Ability to learn complex computing environments quickly.


• Broad understanding of all aspects of IT and enterprise systems interoperability.


• Experience managing and developing a team is preferred.


• Multinational enterprise is preferred.


• Excellent verbal and written communication, problem solving, and analytical skills, including the ability to produce usable and maintainable documentation.


• Ability to learn quickly and adapt to changing environment.


• Ability to communicate with both technical and non-technical personnel.


• Time management skills with proven ability to effectively coordinate multiple tasks under pressure.


• On-call support may be required as Tier 3 support. Some offhours work to be performed.

What are the 3-4 non-negotiable requirements on this position?

• Bachelor’s degree in Computer Information Systems, Management Information Systems or CISSP certification strongly preferred. Equivalent combination of education and experience will be considered. Candidates with no degree must have a minimum of 10 years relevant work experience.


• 5 – 10 years of information security experience.Minimum 2 years experience of utilizing Machine Learning statistical analytics techniques for anomaly, intrusion detection, social and behavioral analysis, etc.


• Advanced knowledge of network security concepts, best practices, and procedures.Expert-level knowledge of security architectural designs, requirements development, and solutions definition.Expert-level knowledge of Security Information and Event Management (SIEM), log management, or threat monitoring systems.