Threat Intelligence Product Champion

Enlighten; Washington (District of Columbia); Hybrid; USD 119,000 - 165,000; Full time

Benefits offered by this job

100% paid employee premium for health,

vision and dental plans

10% 401k benefit

PTO + 10 paid holidays

Education/training allowances

Job summary

Enlighten is seeking a Product Champion to apply cyber security, data science, DCO, and networking knowledge to support cyber teams and train users on intelligence tools. You will hunt threats, report findings, and convert tools and processes into automated platform capabilities.

The role involves collecting customer requirements, generating use cases, and delivering system training to end users, with on-site presence in Washington, DC and occasional visits to Enlighten HQ.

Qualifications

• Active Public Trust U.S. Government security clearance required.
• 5+ years in cyber security operations; 3 years with Masters; or 9 years with HS diploma or equivalent.
• Experience with DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components.
• Ability to present analysis to stakeholders of varying data knowledge levels.
• Proficient in SQL and KQL (Kusto).
• Python experience; bonus for Jupyter notebooks.
• Experience with dashboards/visualizations (Power BI, Superset).
• Familiarity with cloud providers and environments (Azure, AWS, GCP).
• Cyber Hunt methodologies and techniques.
• Experience with SIEMs (e.g., Splunk, QRadar, ELK).
• Experience with SOARs (e.g., Sentinel, Cortex, X-SOAR).
• Developing and deploying threat detection signatures.
• Collecting data from cyber defense resources (CVE, OSINT).
• Recognizing and categorizing vulnerabilities and attacks.
• Reading and interpreting signatures (SNORT, SIGMA, Yara, YAML).
• Network traffic analysis methods (TCP-DUMP, Wireshark, Zeek).
• Familiar with MITRE ATT&CK and incident response methodologies.
• IDS/IPS tools and applications.
• Strong interpersonal skills and public speaking ability.
• Excellent organizational skills and attention to detail.
• Ability to work independently and in a team; support training events.

Responsibilities

• Champion Threat Awareness Sharing Capability (TASC) suite of applications.
• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D).
• Present threat hunt findings through live, interactive sessions in person or remote.
• Assist customers with their threat hunting operations.
• Collaborate with customers to define requirements and gaps to maximize satisfaction.
• Advise customers on data enrichment and functions to enhance experience.
• Perform quality assurance on data resident on the platform.
• Evaluate and analyze new data feeds for relevance and usability.
• Support analytic requests (data query, visualizations, dashboards).
• Leverage statistical modeling to uncover patterns and translate into visualizations.
• Synthesize diverse data streams into coherent data products for customers.
• Provide real-time customer support during normal hours.
• Maintain awareness of emerging cyber threats for action and notification.
• Provide documentation on data feeds and deliverables.
• Support demonstrations of platform capabilities.
• Additional duties as assigned.

Skills

Cyber security operations

SQL & KQL

Python

Data visualization

Power BI

Cloud platforms

Education

B.S. in Information Technology, Cyber Security or related field

Tools

Power BI

Superset

Jupyter notebooks

Splunk

ELK

Job description

Enlighten is seeking a Product Champion to apply cyber security, data science, DCO, and networking knowledge to support cyber teams and train users on intelligence tools. You will hunt threats, report findings, and convert tools and processes into automated platform capabilities.

The role involves collecting customer requirements, generating use cases, and delivering system training to end users, with on-site presence in Washington, DC and occasional visits to Enlighten HQ.