Enterprise - Senior Data Scientist - Python, AWS, Splunk
$150,000–$275,000 year
HybridFort Meade, Maryland, United States
Job Summary
Conduct threat hunt operations on Big Data Platforms, present findings through live interactive sessions, and assist customers with their threat hunting activities. Collect customer Cyber Operations requirements, generate use cases, and perform quality assurance checks on resident data while evaluating new data feeds for relevance. Leverage advanced statistical modeling to uncover hidden patterns, synthesize diverse data streams into coherent products, and support analytic requests including visualizations and dashboards. Provide real-time customer support, maintain situational awareness of emerging threats, and deliver documentation on data feeds and deliverables. Work on customer site in Fort Meade, MD for 5 days/week with up to 40% travel, reporting to a team championing the Threat Awareness Sharing Capability suite.
Required Qualifications
- A current TS/SCI level U.S. Government Security Clearance
- U.S. Citizenship
- Minimum of nine (9) + years of experience in cybersecurity operations-related fields with a Bachelor's in Information Technology, Cyber Security, or related field
- 7 years relevant experience with a Master's in related field
- High School Diploma or equivalent and 13 years relevant experience
- Experience with the DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components
- Presenting analysis to stakeholders of varying data knowledge levels
- Proficient in various query languages (SQL, KQL (Kusto))
- Python experience
- Experience with dashboarding/visualizations (Power BI, Superset)
- Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)
- Cyber Hunt methodologies and techniques
- SIEMs (e.g., Splunk, Q-Radar, ELK)
- SOARs (e.g., Sentinel, CORTEX, X-SOAR)
- Developing and deploying threat detection signatures
- Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)
- Recognizing and categorizing types of vulnerabilities and associated attacks
- Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)
- Network traffic analysis methods (e.g., TCP-DUMP, Wireshark, Zeek)
- Familiar with cyber attack stages (MITRE ATT&CK) and incident response and handling methodologies
- Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
- Strong interpersonal skills and the ability to interact effectively with others
- Ability to speak in a public forum
- Excellent organizational skills and attention to detail
- Ability to work independently and as part of a team
- Support training events either in-person or virtually
- Strong writing skills
- Must be able to travel up to 40% of the time CONUS and OCONUS
- Must be able to work on customer site in Fort Meade, MD 5 days/40 hours a week
- Flexibility to adapt to changes is needed in this customer-facing role
Desired Qualifications
- Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification
- DoW SOC experience is a huge plus
- Prior experience or familiarity with Big Data Platforms or Data Lake architectures is a plus
- bonus for experience using Jupyter notebooks
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.