Enterprise - Cyber Hunt Analyst - Big Data, SIEMs, Python

Erias Ventures•Ft. Meade, MD

2d•Onsite

About The Position

Erias Ventures is seeking a Cyber Hunt Analyst with strong cyber security, data science, Defensive Cyber Operations (DCO), and networking domain knowledge to support cyber operational teams. This role involves leveraging intelligence and coordination applications and tools, conducting regular cyber hunt activities (threat hunting, reporting findings, automating processes), and performing data science tasks such as operational research, statistical analysis, and model building. The analyst will also be responsible for collecting customer Cyber Operations requirements, generating use cases, and providing system training to end users. The position requires a current TS/SCI U.S. Government Security Clearance and U.S. Citizenship.

Requirements

Minimum of nine plus (9+) years experience in cyber security operations related fields with Bachelors in Information Technology, Cyber Security or related field; seven (7) years relevant experience with Masters in related field; or High School Diploma or equivalent and thirteen (13) years relevant experience.
Experience with the DoW customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components
Experience with BDP (JCRS-D) and JCC2 Applications
Presenting analysis to stakeholders of varying data knowledge levels
Proficient in various query languages (SQL, KQL (Kusto))
Python experience
Experience with dashboarding/visualizations (Power-Bi, Superset)
Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)
Cyber Hunt methodologies and techniques
SIEMs - (e.g., Splunk, Q-Radar, ELK)
SOARs (e.g., Sentinel, CORTEX, X-SOAR)
Developing and deploying threat detection signatures
Collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)
Recognizing and categorizing types of vulnerabilities and associated attacks
Reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML)
Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Zeek)
Familiar with cyber attack stages (MITRE ATT&CK), and incident response and handling methodologies
Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications
Strong interpersonal skills and the ability to interact effectively with others
Ability to speak in a public forum
Excellent organizational skills and attention to detail
Ability to work independently and as part of a team
Support training events either in-person or virtually
Must be able to work on customer site in Fort Meade, MD 5 days a week

Nice To Haves

Experience using Jupyter notebooks
Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification
DoW SOC experience is a huge plus

Responsibilities

Champion Threat Awareness Sharing Capability (TASC) suite of applications
Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D)
Present threat hunt findings through live - interactive sessions either in person or remote
Assist customer(s) with their threat hunting operations
Collaborate with customers to define requirements and operational gaps to maximize satisfaction
Serve as an advisor to the customer on data enrichment and functions to enhance customer experience
Perform quality assurance checks on data that is resident on the platform
Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customer(s)
Support analytic requests (data query search, visualizations, dashboards, etc.)
Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations
Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities
Provide real time customer support during normal working hours
Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s)
Provide documentation on data feeds and deliverables
Support demonstration requests to showcase various capabilities of the platform
Additional duties as assigned

Benefits

Above Market Hourly Pay
11% Roth or Traditional 401k with Immediate Vesting and Deposit
Spot Bonuses for Assisting with Business Development and Company Growth
Professional Development Bonuses for Certificates and Degrees
Company subsidized Medical Coverage
100% Company Paid Vision and Dental Coverage
100% Company Paid Long Term Disability , Short Term Disability , and Group Life Insurance
Monthly Wellness Reimbursement
Paid Time Off with Flexible Work Schedules and Birthday Off
Amazon Prime Membership and Monthly Internet Reimbursement
Technology and Productivity Allowance for Equipment and Supplies
Morale Building and Company Events to Celebrate our Successes and Build our Community
Onboarding and Annual Swag
Company Paid Professional Development and Training