Product Champion – Cyber Operations & Data Analytics

Phoenix Operations Group • Washington, DC

1d • Onsite

About The Position

Phoenix Operations Group is seeking a customer-facing Product Champion with a background in cybersecurity operations, data analytics, Defensive Cyber Operations (DCO), and network security. The role supports and trains cyber operational teams in using intelligence, data analytics, and coordination applications. It combines cyber threat hunting, data analysis, customer engagement, and technical training to help identify emerging threats, analyze complex datasets, communicate findings, and translate operational requirements into capabilities that improve cyber defense operations.

The position requires regular on-site support in Washington, DC, up to four days per week, and may involve occasional travel to a secondary company office. The employee must be a U.S. citizen and hold an active Public Trust or be able to obtain and maintain the required U.S. Government clearance; eligibility to obtain a Secret clearance is also noted.

Requirements

• Active Public Trust clearance or ability to obtain and maintain the required U.S. Government clearance.
• U.S. citizenship.
• One of the following education and experience combinations: five or more years of cybersecurity operations or related technical experience with a bachelor's degree in Information Technology, Cybersecurity, or a related discipline; three or more years of relevant experience with a related master's degree; or nine or more years of relevant experience with a high school diploma or equivalent.
• Ability to present technical analysis and findings to stakeholders with varying levels of technical knowledge.
• Proficiency with query languages such as SQL and Kusto Query Language (KQL).
• Experience with Python.
• Experience developing dashboards and visualizations using tools such as Power BI or Superset.
• Familiarity with cloud environments, including Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Knowledge of cyber threat hunting methodologies and techniques.
• Experience with SIEM tools such as Splunk, QRadar, or ELK.
• Familiarity with SOAR platforms such as Sentinel, Cortex, or X-SOAR.
• Experience developing or deploying threat detection signatures.
• Experience collecting and analyzing data from cyber defense resources, including vulnerability databases and open-source intelligence.
• Ability to identify and categorize vulnerabilities and associated attack techniques.
• Ability to interpret detection signatures and formats such as Snort, Sigma, YARA, and YAML.
• Knowledge of network traffic analysis tools and methods, including TCPDump, Wireshark, and Zeek.
• Familiarity with the MITRE ATT&CK framework, cyber attack lifecycle, and incident response methodologies.
• Understanding of Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Strong communication, presentation, organizational, and analytical skills.
• Ability to work independently and collaboratively in a customer-facing environment.
• Ability to support training and presentations in person and virtually.
• Ability to work on-site in Washington, DC up to four days per week, with occasional travel to a secondary office location.

Nice To Haves

• Experience supporting Department of Defense customers; experience supporting U.S. Cyber Command, DISA, DCDC, or Service Cyber Components is highly desirable.
• Jupyter notebooks familiarity.
• Active Secret security clearance.
• Industry-recognized cybersecurity certifications such as Security+, CySA+, GCIH, GNFA, GCFA, or Data+.
• Previous experience supporting a Department of Defense Security Operations Center (SOC).
• Familiarity with big data platforms and data lake architectures.
• Experience supporting cyber defense, threat intelligence, or operational analytics environments.

Responsibilities

• Support and promote the use of cyber intelligence, threat awareness, and operational coordination applications.
• Conduct cyber threat hunting across designated big data platforms.
• Analyze threat activity, identify patterns, and communicate findings through presentations and interactive sessions.
• Assist customers with threat hunting operations and analytical requests.
• Work directly with customers to identify operational requirements, capability gaps, and opportunities for improvement.
• Recommend data enrichment, platform functionality, and user-experience improvements.
• Perform quality assurance reviews of data maintained within operational platforms.
• Evaluate new and existing data feeds for relevance, quality, and usability.
• Develop and support data queries, dashboards, visualizations, and analytical products.
• Apply statistical analysis and modeling techniques to identify trends and patterns in complex datasets.
• Translate analytical findings into clear, customer-facing visualizations and reports.
• Provide real-time customer support during normal business hours.
• Maintain awareness of emerging cyber threats and communicate relevant findings to impacted stakeholders.
• Develop and maintain documentation for data feeds, analytical products, and deliverables.
• Support demonstrations, customer briefings, and technical training sessions.
• Perform additional duties as assigned.

Benefits

• Medical, dental, and vision insurance with 100% company-paid premiums.
• Fully company-paid short-term disability, long-term disability, and life insurance.
• 401(k) with an automatic 10% company contribution; no matching required.
• Four weeks of paid time off annually.
• Eleven paid holidays per year.
• Paid birthday leave.
• Upfront and annually recurring referral bonuses.
• Bonuses for contributing to the company's GitHub projects.
• Paid training, certifications, and enrichment opportunities.

What This Job Offers

• Job Type: Full-time