Cyber Defense Data Scientist — Threat Hunting & Analytics

GRVTY; Fort Meade (MD); On-site; USD 105,000 - 181,000; Full time

Job summary

GRVTY is seeking a Data Scientist to support mission-focused cyber analytics and defensive cyber operations. You will combine threat hunting, operational research, statistical analysis, and stakeholder engagement to generate actionable insights and empower mission tools.

You’ll own defensive hunting on mission data platforms, build models, and present findings in live briefings. Onsite Fort Meade, five days a week with potential travel.

Qualifications

• U.S. citizenship and a current, active U.S. Government TS/SCI clearance.
• 9 years cyber-security operations with a bachelor; 7 years with a master; 13 years with HS.
• Experience supporting U.S. defense cyber-mission customers and presenting analyses.
• Proficiency with SQL and KQL plus Python for analysis.
• Experience with dashboards and data viz (Power BI or Superset) and cloud (Azure/AWS/GCP).
• Knowledge of cyber-hunt methodologies; SIEM (Splunk/QRadar/ELK); SOAR (Sentinel, Cortex, XSOAR).
• Experience developing or deploying threat-detection signatures; CVE/OSINT; SNORT/SIGMA/YARA.
• Experience with network-traffic tools (tcpdump/Wireshark/Zeek); MITRE ATT&CK; IDS/IPS.
• Strong communication, writing, and training skills; able to work independently.
• Onsite five-day requirement at Fort Meade; travel up to 40% domestically/internationally.

Responsibilities

• Conduct defensive cyber threat hunts on mission big data platforms and translate findings into actionable recommendations.
• Apply statistical analysis and model building to reveal patterns in cyber and network data.
• Use data queries, dashboards, and visualizations to support customer analytics and live briefings.
• Support customers using TASC applications and platforms like JCRS-D.
• Collaborate with customers to identify requirements, gaps, use cases, and data enrichment opportunities.
• Assess cyber data feeds for relevance, quality, and usability; document findings.
• Apply threat-hunting methods and emerging intelligence to support threat identification.
• Assist users with threat-hunting workflows, platform demos, and hands-on training.
• Help translate repeatable methods into automated mission capabilities.

Skills

SQL

Kusto Query Language (KQL)

Python for analysis

Power BI

Superset

Cloud platforms

Cyber-hunt methodologies

Splunk

QRadar

ELK

SOAR (Sentinel, Cortex, XSOAR)

Threat-hunting workflows

Jupyter notebooks

Education

Bachelor's degree in information technology or cybersecurity

Master's degree (preferred)

High-school diploma or equivalent (with extensive experience)

Tools

Power BI

Superset

Jupyter notebooks

Job description

GRVTY is seeking a Data Scientist to support mission-focused cyber analytics and defensive cyber operations. You will combine threat hunting, operational research, statistical analysis, and stakeholder engagement to generate actionable insights and empower mission tools.

You’ll own defensive hunting on mission data platforms, build models, and present findings in live briefings. Onsite Fort Meade, five days a week with potential travel.