Data Scientist/Analyst - 29733

Mission Technologies, a division of HII; Fort Meade (MD); On-site; USD 145,000 - 190,000; Full time

Benefits offered by this job

Healthcare premium for employee

PTO + holidays

Education/training allowances

401k

Job summary

Enlighten is seeking a Data Scientist/Analyst to apply cyber security, data science, Defensive Cyber Operations, and networking knowledge to support and train cyber operational teams. The role focuses on threat hunting, analytics, and turning data into actionable visualizations.

Responsibilities include collecting customer requirements, developing use cases, and delivering training to end users; frequent collaboration with customers is required. Some travel expected.

Qualifications

• Must have active TS/SCI clearance; U.S. citizenship required.
• 9+ years in cyber security operations with relevant degrees or 13+ years with HS diploma.
• Experience with DoD customers such as US Cyber Command, DISA, or DCDC preferred.
• Strong ability to present analysis to stakeholders with varying data knowledge levels.
• Proficiency in SQL and KQL; Python and Jupyter notebooks a plus.
• Experience with dashboards/visualizations (Power-BI, Superset).
• Familiarity with cloud environments (Azure, AWS, GCP).

Responsibilities

• Champion Threat Awareness Sharing Capability (TASC) suite
• Conduct threat hunt operations on Big Data Platform(s) – BDP (JCRS-D)
• Present threat hunt findings in live or remote sessions
• Assist customers with threat hunting operations
• Define requirements and operational gaps with customers
• Advise on data enrichment to enhance customer experience
• Perform QA on data on the platform
• Evaluate new data feeds for relevance and usability
• Support analytics requests (queries, visualizations, dashboards)
• Leverage statistical modeling to create customer-facing visuals
• Synthesize data streams into coherent data products
• Provide real-time customer support during working hours
• Maintain awareness of emerging threats and notify customers
• Document data feeds and deliverables
• Support platform demonstrations
• Additional duties as assigned

Skills

SQL

KQL

Python

Jupyter notebooks

Power-BI

Superset

Splunk

Q-Radar

ELK

SNORT

SIGMA

Yara

Zeek

Wireshark

MITRE ATT&CK

IDS/IPS

Cybersecurity

Data analysis

Education

Bachelor's in Information Technology, Cyber Security or related field

Master's in related field

High School Diploma or equivalent

Tools

Power-Bi

Superset

Jupyter notebooks

Splunk

Q-Radar

ELK

Yara

SNORT

Zeek

Job description

Enlighten, honored as a Top Workplace from USA Today, is a leader in big data solution development and deployment, with expertise in cloud-based services, software and systems engineering, cyber capabilities, and data science. Enlighten provides continued innovation and proactivity in meeting our customers’ greatest challenges.

Why Enlighten?

Benefits

• 100% paid employee premium for healthcare, vision and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education/training allowances.

Anticipated Salary Range: $144,501.00 - $190,000.00. The salary range for this role is intended as a good faith estimate based on the role's location, expectations, and responsibilities. When extending an offer, Enlighten takes a variety of factors into consideration which include, but are not limited to, the role's function, internal equity and a candidate's education or training, work experience, certifications and key skills. Occasionally positions/roles may include additional non-recurrent compensation and will be addressed by the recruiter during the interview process.

Job Description

Enlighten is looking for a Data Scientist/Analyst to apply strong cyber security, data science, Defensive Cyber Operations (DCO), and networking domain knowledge to support and train cyber operational teams to leverage intelligence and coordination applications and tools. Regular cyber hunt activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform. Regular data science activities consist of operational research, statistical analysis, hypothesis testing, model building/testing, and communicating results using visualizations. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, and system training to end users.

Mid-Senior Level

Essential Job Responsibilities

• Champion Threat Awareness Sharing Capability (TASC) suite of applications.
• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D).
• Present threat hunt findings through live - interactive sessions either in person or remote.
• Assist customer(s) with their threat hunting operations.
• Collaborate with customers to define requirements and operational gaps to maximize satisfaction.
• Serve as an advisor to the customer on data enrichment and functions to enhance customer experience.
• Perform quality assurance checks on data that is resident on the platform.
• Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customer(s).
• Support analytic requests (data query search, visualizations, dashboards, etc.).
• Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations.
• Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities.
• Provide real time customer support during normal working hours.
• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s).
• Provide documentation on data feeds and deliverables.
• Support demonstration requests to showcase various capabilities of the platform.
• Additional duties as assigned.

Minimum Qualifications

• Clearance Requirement: Must currently have and maintain an active TS/SCI level U.S. Government Security Clearance; U.S. Citizenship required.
• Minimum of 9+ years experience in cyber security operations related fields with Bachelors in Information Technology, Cyber Security or related field; 7 years relevant experience with Masters in related field; or High School Diploma or equivalent and 13 years relevant experience.
• Experience with the DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components.
• Presenting analysis to stakeholders of varying data knowledge levels.
• Proficient in various query languages (SQL, KQL (Kusto)).
• Python experience, and bonus for experience using Jupyter notebooks.
• Experience with dashboarding/visualizations (Power-Bi, Superset).
• Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform).
• Cyber Hunt methodologies and techniques.
• SIEMs - (e.g., Splunk, Q-Radar, ELK).
• SOARs (e.g., Sentinel, CORTEX, X-SOAR).
• Developing and deploying threat detection signatures.
• Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT).
• Recognizing and categorizing types of vulnerabilities and associated attacks.
• Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML).
• Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Zeek).
• Familiar with cyber attack stages (MITRE ATT&CK), and incident response and handling methodologies.
• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
• Strong interpersonal skills and the ability to interact effectively with others. Ability to speak in a public forum.
• Excellent organizational skills and attention to detail.
• Ability to work independently and as part of a team.
• Support training events either in-person or virtually.
• Strong writing skills.
• Must be able to travel up to 40% of the time CONUS and OCONUS.
• Must be able to work on customer site in Fort Meade, MD 5 days/40 hours a week. Flexibility to adapt to changes is needed in this customer facing role.

Preferred Requirements

• Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification.
• DoW SOC experience is a huge plus.
• Prior experience or familiarity with Big Data Platforms or Data Lake architectures is a plus.

We have many more additional great benefits/perks that you can find on our website at www.enlighten.com [enlighten.com].