Enterprise - Cyber Hunt Analyst - SQL, Splunk, SOARs

Erias Ventures, LLC; Fort Meade (MD); On-site; USD 150,000 - 275,000; Full time

Benefits offered by this job

Above Market Pay

Roth 401k

Spot Bonuses

Professional Development

Medical Coverage

Vision Coverage

Dental Coverage

Disability Coverage

Wellness Reimbursement

Paid Time Off

Flexible Schedules

Birthday Off

Amazon Prime

Job summary

Erias Ventures, LLC seeks a Cyber Hunt Analyst to apply cyber security, data science, DCO, and networking knowledge to support cyber operations. The role involves hunting threats on Big Data Platforms, reporting findings, and translating tools into automated capabilities for the current platform.

You will collect customer requirements, train end users, and collaborate to close gaps, while maintaining awareness of evolving threats and delivering data-driven visualizations.

Qualifications

• Minimum 9+ years in cyber security operations
• Bachelor's in IT or Cyber Security; Masters preferred
• U.S. Citizenship and TS/SCI clearance

Responsibilities

• Champion Threat Awareness Sharing Capability (TASC) suite of applications
• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D)
• Present threat hunt findings through live - interactive sessions either in person or remote
• Assist customer(s) with their threat hunting operations
• Collaborate with customers to define requirements and operational gaps to maximize satisfaction
• Serve as an advisor to the customer on data enrichment and functions to enhance customer experience
• Perform quality assurance checks on data that is resident on the platform
• Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customer(s)
• Support analytic requests (data query search, visualizations, dashboards)
• Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations
• Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities
• Provide real time customer support during normal working hours
• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s)
• Provide documentation on data feeds and deliverables
• Support demonstration requests to showcase various capabilities of the platform
• Additional duties as assigned

Skills

DoW Experience

Stakeholder Presentation

SQL

Python

Power BI

Azure

AWS

GCP

Cyber Hunt

SIEM

SOAR

Threat Signatures

Data Feeds

Vulnerabilities

Signature Reading

Traffic Analysis

MITRE ATT&CK

IDS/IPS

Public Speaking

Organization

Travel 40%

Education

Bachelor's in IT/Cyber Security

Master's in related field

High School Diploma + 13 yrs experience

Tools

Jupyter notebooks

Job description

• Ft. Meade, MD

Erias Ventures was founded to serve its customers with an entrepreneurial mindset. We value creative problem-solving, open communication, and empowering our employees to make decisions and put forth new ideas.

Our staff includes technical experts working across multiple disciplines, bringing diverse perspectives to every project. We are seeking engineers who wish to grow their careers and want to become part of a technicallystrong and growth-oriented company focused on bringing innovative solutions to the difficult mission problems facing our customers.

Description

We are seeking a Cyber Hunt Analyst to apply strong cyber security, data science, Defensive Cyber Operations (DCO), and networking domain knowledge to support cyber operational teams with leveraging intelligence and coordination applications and tools. Regular cyber hunt activities consist of hunting for threats, reporting on findings, and converting tools, techniques, and processes into automated capabilities for the current cyber platform. Regular data science activities consist of operational research, statistical analysis, hypothesis testing, model building/testing, and communicating results using visualizations. Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, and system training to end users.

• Champion Threat Awareness Sharing Capability (TASC) suite of applications
• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D)
• Present threat hunt findings through live - interactive sessions either in person or remote
• Assist customer(s) with their threat hunting operations
• Collaborate with customers to define requirements and operational gaps to maximize satisfaction
• Serve as an advisor to the customer on data enrichment and functions to enhance customer experience
• Perform quality assurance checks on data that is resident on the platform
• Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customer(s)
• Support analytic requests (data query search, visualizations, dashboards, etc.)
• Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations
• Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities
• Provide real time customer support during normal working hours
• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s)
• Provide documentation on data feeds and deliverables
• Support demonstration requests to showcase various capabilities of the platform
• Additional duties as assigned

Clearance

Must currently have and maintain an active TS/SCI level U.S. Government Security Clearance; U.S. Citizenship required.

Experience

Minimum of nine plus (9+) years experience in cyber security operations related fields with Bachelors in Information Technology, Cyber Security or related field; seven (7) years relevant experience with Masters in related field; or High School Diploma or equivalent and thirteen (13) years relevant experience.

Required skills

• Experience with the DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components
• Presenting analysis to stakeholders of varying data knowledge levels
• Proficient in various query languages (SQL, KQL (Kusto))
• Python experience, and bonus for experience using Jupyter notebooks
• Experience with dashboarding/visualizations (Power-Bi, Superset)
• Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)
• Cyber Hunt methodologies and techniques
• SIEMs - (e.g., Splunk, Q-Radar, ELK)
• SOARs (e.g., Sentinel, CORTEX, X-SOAR)
• Developing and deploying threat detection signatures.
• Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)
• Recognizing and categorizing types of vulnerabilities and associated attacks
• Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)
• Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Zeek)
• Familiar with cyber attack stages (MITRE ATT&CK), and incident response and handling methodologies
• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
• Strong interpersonal skills and the ability to interact effectively with others. Ability to speak in a public forum
• Excellent organizational skills and attention to detail
• Ability to work independently and as part of a team
• Support training events either in-person or virtually
• Strong writing skills
• Must be able to travel up to 40% of the time CONUS and OCONUS
• Must be able to work on customer site in Fort Meade, MD 5 days/40 hours a week. Flexibility to adapt to changes is needed in this customer facing role

Desired skills

• Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification
• DoW SOC experience is a huge plus
• Prior experience or familiarity with Big Data Platforms or Data Lake architectures is a plus

Benefits

Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $150,000 - $275,000.

Wealth Benefits

• Above Market Hourly Pay
• 11% RothorTraditional 401kwith Immediate Vesting and Deposit
• Spot Bonusesfor Assisting with Business Development and Company Growth
• Professional Development Bonusesfor Certificates and Degrees

Health Benefits

• Company subsidizedMedicalCoverage
• 100%Company PaidVisionandDentalCoverage
• 100%Company PaidLong Term Disability,Short Term Disability, andGroup Life Insurance
• MonthlyWellness Reimbursement

Happiness Benefits

• Paid Time OffwithFlexible WorkSchedules andBirthday Off
• Amazon Prime MembershipandMonthlyInternetReimbursement
• TechnologyandProductivity Allowancefor Equipment and Supplies
• Morale BuildingandCompany Eventsto Celebrate our Successes and Build our Community
• Onboarding and AnnualSwag
• Company Paid Professional DevelopmentandTraining

At Erias Ventures, we are dedicated to fostering a diverse and inclusive workplace. As an equal opportunity employer, we ensure that all qualified applicants are considered for employment based on merit, without discrimination. We welcome individuals regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

At Erias Ventures, we are committed to creating a diverse environment and are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Referrals

you could be eligible for a referral bonus up to $10,000 for each successful hire.