Data Scientist / Active TS/SCI
$135,000–$216,000 year
On-siteWashington, District of Columbia, United States or Chandler, Arizona, United States
Job Summary
Design, develop, and deploy machine learning models to improve SOC alert fidelity, prioritization, and response effectiveness while analyzing large volumes of security telemetry from SIEM, SOAR, EDR, network, and cloud platforms. Build and maintain data pipelines, feature engineering processes, and model validation workflows, integrating analytics into SOC tools using Docker- and Kubernetes-based architectures. Apply MITRE ATT&CK frameworks to align analytics with adversary behaviors and provide technical leadership by mentoring personnel and producing documentation for leadership briefings. Collaborate with SOC analysts and threat hunters to operationalize insights and support continuous improvement of detection capabilities within a 24x7 Security Operations Center.
Required Qualifications
- Bachelor's degree
- Minimum 8 years experience
- Additional 4 years of experience in lieu of degree
- Minimum of 7 years Intelligence experience
- IC Management or Supervision related experience
- Knowledge of MITRE ATT&CK
- Knowledge of D3FEND
- Knowledge of Diamond Model
- Knowledge of Kill Chain frameworks
- CISM certification
- CySA+ certification
- GCIA + CFR certification
- Network+ certification
- Security+ certification
- CEH certification
- U.S. citizenship
- Active TS/SCI security clearance
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.