Cyber Operations & Data Analytics Product Champion

Phoenix Operations Group; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Short-term & long-term disability and

401(k) with automatic 10% company"con

Paid time off: 4 weeks annually

Paid holidays: 11 per year

Birthday leave

Referral bonuses

Open-source bonuses

Professional development

Job summary

Phoenix Operations Group seeks a Product Champion with a strong cybersecurity operations, data analytics, and DCO background to support and train cyber teams. You will identify threats, analyze complex data, and translate findings into actionable capabilities for cyber defense operations.

This role blends threat hunting, data analytics, and customer engagement, requiring on-site work in Washington, DC up to four days per week with some travel to a secondary office.

Qualifications

• Active Public Trust clearance or ability to obtain and maintain required U.S. Government clearance.
• U.S. Citizenship required.
• 5+ years in cybersecurity operations or related field with a bachelor's degree in IT/Cybersecurity; or 3+ years with a master's; or 9+ years with a high school diploma.
• Experience supporting DoD customers; experience with US Cyber Command, DISA, DCDC, or Service Cyber Components desirable.
• Ability to present technical analysis to stakeholders with varying levels of technical knowledge.
• Proficient with SQL and KQL.
• Experience with Python; Jupyter notebooks a plus.
• Experience developing dashboards/visualizations with Power BI or Superset.
• Familiarity with Azure, AWS, or GCP.
• Knowledge of threat hunting methodologies.
• Experience with SIEM tools such as Splunk, QRadar, or ELK.
• Familiarity with SOAR platforms such as Sentinel, Cortex, or X-SOAR.
• Experience developing or deploying threat detection signatures.
• Experience collecting and analyzing data from cyber defense resources and open-source intelligence.
• Ability to identify vulnerabilities and attack techniques.
• Ability to interpret detection signatures and formats (Snort, Sigma, YARA, YAML).
• Knowledge of network traffic analysis tools (TCPDump, Wireshark, Zeek).
• Familiarity with MITRE ATT&CK framework, cyber kill chain, and incident response methodologies.
• Understanding of IDS/IPS.
• Strong communication, presentation, organizational, and analytical skills.
• Ability to work independently and in a customer-facing environment.
• Ability to support training and presentations in person and virtually.
• Ability to work on-site in Washington, DC up to four days per week, with occasional travel to secondary office location.

Responsibilities

• Support and promote the use of cyber intelligence, threat awareness, and operational coordination applications.
• Conduct cyber threat hunting across designated big data platforms.
• Analyze threat activity, identify patterns, and communicate findings via presentations and interactive sessions.
• Assist customers with threat hunting operations and analytical requests.
• Work with customers to identify operational requirements, capability gaps, and improvement opportunities.
• Provide recommendations on data enrichment, platform functionality, and user experience.
• Perform QA reviews of data in operational platforms.
• Evaluate new and existing data feeds for relevance, quality, and usability.
• Develop and support data queries, dashboards, visualizations, and analytical products.
• Apply statistical analysis to identify trends in complex datasets.
• Translate analytical findings into customer-facing visualizations and reports.
• Provide real-time customer support during business hours.
• Maintain awareness of emerging threats and communicate findings to stakeholders.
• Develop and maintain documentation for data feeds and deliverables.
• Support demonstrations, briefings, and technical training sessions.
• Perform additional duties as assigned.

Skills

SQL

KQL

Python

Power BI

Superset

Jupyter notebooks

Splunk

QRadar

ELK

SOAR (Sentinel)

Threat hunting

Data analytics

Communication

Presentation

Cloud platforms (Azure, AWS, GCP)

Threat detection signatures

Vulnerability data sources

Snort/Sigma/YAML

TCPDump/Wireshark/Zeek

Education

Bachelor's degree in Information Technology or Cybersecurity

Master's degree in related field

High school diploma or equivalent with 9+ years experience

Tools

Power BI

Superset

Jupyter notebooks

TCPDump

Wireshark

Zeek

Splunk

QRadar

ELK

Sentinel

Cortex

X-SOAR

Job description

Phoenix Operations Group seeks a Product Champion with a strong cybersecurity operations, data analytics, and DCO background to support and train cyber teams. You will identify threats, analyze complex data, and translate findings into actionable capabilities for cyber defense operations.

This role blends threat hunting, data analytics, and customer engagement, requiring on-site work in Washington, DC up to four days per week with some travel to a secondary office.