Product Champion – Cyber Operations & Data Analytics

Phoenix Operations Group • Washington, DC

1d • Onsite

About The Position

The Product Champion supports and trains cyber operational teams in using intelligence, data analytics, and coordination applications. The role combines cyber threat hunting, data analysis, customer engagement, and technical training to help identify emerging threats, analyze complex datasets, communicate findings, and translate operational requirements into capabilities that improve cyber defense operations.

This customer-facing position supports customers with threat-hunting operations and analytical requests, identifies operational requirements and capability gaps, and recommends improvements to data enrichment, platform functionality, and user experience. The Product Champion develops queries, dashboards, visualizations, reports, and other analytical products; reviews platform data and data feeds for quality and usability; and maintains related documentation. The position provides real-time customer support during normal business hours and includes demonstrations, briefings, and technical training.

The role requires regular on-site support in Washington, DC, up to four days per week, and may involve occasional travel to another company office location. U.S. citizenship and an active Public Trust clearance, or the ability to obtain and maintain the required U.S. Government clearance, are required. The candidate must be eligible to obtain a Secret clearance.

Requirements

• Active Public Trust clearance or ability to obtain and maintain the required U.S. Government clearance; eligible to obtain a Secret clearance.
• U.S. citizenship.
• Five or more years of cybersecurity operations or related technical experience with a bachelor's degree in Information Technology, Cybersecurity, or a related discipline; alternatively, three or more years of relevant experience with a related master's degree, or nine or more years of relevant experience with a high school diploma or equivalent.
• Ability to present technical analysis and findings to stakeholders with varying levels of technical knowledge.
• Proficiency with query languages such as SQL and Kusto Query Language (KQL).
• Experience with Python.
• Experience developing dashboards and visualizations using tools such as Power BI or Superset.
• Familiarity with cloud environments, including Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Knowledge of cyber threat-hunting methodologies and techniques.
• Experience with Security Information and Event Management (SIEM) tools such as Splunk, QRadar, or ELK.
• Familiarity with Security Orchestration, Automation, and Response (SOAR) platforms such as Sentinel, Cortex, or X-SOAR.
• Experience developing or deploying threat-detection signatures.
• Experience collecting and analyzing data from cyber defense resources, including vulnerability databases and open-source intelligence.
• Ability to identify and categorize vulnerabilities and associated attack techniques.
• Ability to interpret detection signatures and formats such as Snort, Sigma, YARA, and YAML.
• Knowledge of network traffic analysis tools and methods, including TCPDump, Wireshark, and Zeek.
• Familiarity with the MITRE ATT&CK framework, cyber attack lifecycle, and incident response methodologies.
• Understanding of Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Strong communication, presentation, organizational, and analytical skills.
• Ability to work independently and collaboratively in a customer-facing environment.
• Ability to support training and presentations in person and virtually.
• Ability to work on-site in Washington, DC, up to four days per week, with occasional travel to a secondary office location.

Nice To Haves

• Experience supporting Department of Defense customers; support for U.S. Cyber Command, DISA, DCDC, or Service Cyber Components is highly desirable.
• Familiarity with Jupyter notebooks.
• Active Secret security clearance.
• Industry-recognized cybersecurity certifications such as Security+, CySA+, GCIH, GNFA, GCFA, or Data+.
• Previous experience supporting a Department of Defense Security Operations Center (SOC).
• Familiarity with big data platforms and data lake architectures.
• Experience supporting cyber defense, threat intelligence, or operational analytics environments.

Responsibilities

• Support and promote the use of cyber intelligence, threat awareness, and operational coordination applications.
• Conduct cyber threat hunting across designated big data platforms.
• Analyze threat activity, identify patterns, and communicate findings through presentations and interactive sessions.
• Assist customers with threat-hunting operations and analytical requests.
• Work with customers to identify operational requirements, capability gaps, and opportunities for improvement.
• Recommend data enrichment, platform functionality, and user-experience improvements.
• Perform quality assurance reviews of data maintained within operational platforms.
• Evaluate new and existing data feeds for relevance, quality, and usability.
• Develop and support data queries, dashboards, visualizations, and analytical products.
• Apply statistical analysis and modeling techniques to identify trends and patterns in complex datasets.
• Translate analytical findings into customer-facing visualizations and reports.
• Provide real-time customer support during normal business hours.
• Maintain awareness of emerging cyber threats and communicate relevant findings to stakeholders.
• Develop and maintain documentation for data feeds, analytical products, and deliverables.
• Support demonstrations, customer briefings, and technical training sessions.
• Perform additional duties as assigned.

Benefits

• Medical, dental, and vision insurance with 100% company-paid premiums.
• Fully company-paid short-term disability, long-term disability, and life insurance.
• 401(k) with an automatic 10% company contribution and no matching required.
• Four weeks of paid time off annually.
• Eleven paid holidays per year.
• Paid birthday leave.
• Upfront and annually recurring referral bonuses.
• Bonuses for contributing to company GitHub projects.
• Paid training, certifications, and enrichment opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level