Threat Hunting Data Scientist & Cyber Analytics Lead

Jobtailor; Fort Meade (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor in Fort Meade, MD, USA seeks a senior cyber security professional to lead threat hunting operations on the DoD-scale data platforms. You will conduct threat hunts, analyze big data, and present findings in live sessions, in person or remotely.

Requirements include TS/SCI, U.S. citizenship, 9+ years of cyber security ops or 7 years with master's, strong SQL/KQL, Python, Power BI or Superset, cloud familiarity, and ability to travel 40%. On-site role at customer site, 5 days/40 hours.

Qualifications

• Active TS/SCI clearance and U.S. citizenship required.
• 9+ years cyber security operations experience with a bachelor's degree in IT/Cyber Security or related field; or 7 years with a master's; or 13 years with a high school diploma/equivalent.
• Experience with DoW customers, ideally US Cyber Command, DISA, DCDC, or Service Cyber Components.
• Ability to present analysis to stakeholders with varying levels of data knowledge.
• Proficiency in SQL and KQL (Kusto).
• Python experience; Jupyter notebooks a bonus.
• Experience with Power BI or Superset dashboarding/visualizations.
• Familiarity with Azure, AWS, and Google Cloud Platform.
• Knowledge of cyber hunt methodologies and techniques.
• Experience with SIEMs such as Splunk, Q-Radar, or ELK.
• Experience with SOARs such as Sentinel, CORTEX, or X-SOAR.
• Ability to develop and deploy threat detection signatures.
• Experience collecting data from cyber defense resources such as CVE and OSINT.
• Ability to read and interpret SNORT, SIGMA, Yara, and YAML signatures.
• Knowledge of MITRE ATT&CK and incident response/handling methodologies.
• Knowledge of IDS/IPS tools and applications.
• Public speaking, writing, and organizational skills.

Responsibilities

• Champion the Threat Awareness Sharing Capability (TASC) suite of applications.
• Conduct threat hunt operations on assigned Big Data Platforms.
• Present threat hunt findings through live, interactive sessions in person or remotely.
• Assist customers with threat hunting operations.
• Define customer requirements and operational gaps.
• Advise customers on data enrichment and platform functions.
• Perform quality assurance checks on platform data.
• Evaluate new or potential data feeds for relevance and usability.
• Support analytic requests, including data queries, visualizations, and dashboards.
• Use advanced statistical modeling to uncover patterns and create customer-facing visualizations.
• Synthesize diverse data streams into coherent data products.
• Provide real-time customer support during normal working hours.
• Monitor emerging cyber threats for potential action and customer notification.
• Document data feeds and deliverables.
• Support platform capability demonstrations.
• Support training events in person or virtually.
• Travel up to 40% CONUS and OCONUS.

Skills

Threat Hunting

Data Analysis

SQL

KQL

Python

Power BI

Azure/AWS/GCP

Public Speaking

Teamwork

Documentation

Education

Bachelor's degree in IT/Cyber Security or related

Master's degree (preferred)

Tools

Jupyter notebooks

Job description

Jobtailor in Fort Meade, MD, USA seeks a senior cyber security professional to lead threat hunting operations on the DoD-scale data platforms. You will conduct threat hunts, analyze big data, and present findings in live sessions, in person or remotely.

Requirements include TS/SCI, U.S. citizenship, 9+ years of cyber security ops or 7 years with master's, strong SQL/KQL, Python, Power BI or Superset, cloud familiarity, and ability to travel 40%. On-site role at customer site, 5 days/40 hours.