Product Champion - 29217

About the role

Enlighten is a leader in big data solution development and deployment, specializing in cloud-based services, software and systems engineering, cyber capabilities, and data science. We provide continuous innovation and proactive solutions to meet our customers' most challenging needs.

Responsibilities

• Champion Threat Awareness Sharing Capability (TASC) suite of applications.
• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP (JCRS-D).
• Present threat hunt findings through live - interactive sessions either in person or remotely.
• Aid customers with their threat hunting operations.
• Collaborate with customers to define requirements and operational gaps to maximize satisfaction.
• Serve as an advisor to the customer on data enrichment and functions to enhance customer experience.
• Perform quality assurance checks on data that is resident on the platform.
• Evaluate and analyze new or potential data feeds to determine relevance and usability of data for customers.
• Support analytic requests (data query search, visualizations, dashboards, etc.).
• Leverage advanced statistical modeling to uncover hidden patterns and translate them into intuitive, customer-facing visualizations.
• Synthesize diverse data streams into coherent data products that help customers visualize their progress and identify new opportunities.
• Provide real-time customer support during normal working hours.
• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s).
• Support demonstration requests to showcase various capabilities of the platform.
• Document data feeds and deliverables.
• Additional duties as assigned.

Requirements

• Clearance Requirement: Must currently have and maintain an active Secret level U.S. Government Security Clearance; U.S. Citizenship required. Must be willing to obtain a TS/SCI clearance.
• Minimum of 5+ years in cyber security operations related fields with a B.S. in Information Technology, Cyber Security, or related; 3 years relevant experience with Masters in related field; or High School Diploma or equivalent and 9 years relevant experience.
• Experience with DoD customers, ideally supporting US Cyber Command, DISA or DCDC, or Service Cyber Components.
• Presentation of analysis to stakeholders of varying data knowledge levels.
• Proficiency in various query languages (SQL, KQL (Kusto)). Python experience, and bonus for experience using Jupyter notebooks.
• Experience with dashboarding/visualizations (Power-Bi, Superset).
• Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform).
• Experience with cyber hunt methodologies and techniques.
• Experience with SIEMs (e.g., Splunk, Q-Radar, ELK). SOARs (e.g., Sentinel, CORTEX, X-SOAR).
• Experience developing and deploying threat detection signatures.
• Experience collecting data from a variety of cyber defense resources (e.g., CVE, OSINT).
• Experience recognizing and categorizing types of vulnerabilities and associated attacks.
• Experience reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YAML).
• Experience with network traffic analysis methods (e.g., TCP-DUMP, Wireshark, Zeek).
• Familiarity with cyber attack stages (MITRE ATT&CK), and incident response and handling methodologies.
• Experience with Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
• Strong interpersonal skills and the ability to interact effectively with others. Ability to speak in a public forum.
• Excellent organizational skills and attention to detail.
• Ability to work independently and as part of a team.
• Support training events either in-person or virtually.
• Strong writing skills.
• Must be able to travel up to 40% of the time CONUS and OCONUS.
• Must be able to work on customer site in Fort Meade, MD 5 days/40 hours a week.
• Flexibility to adapt to changes is needed in this customer facing role.

Qualifications

• Data+, Security+, CySA+, GCIH, GNFA, GCFA or other industry recognized Cybersecurity Certification.
• Prior experience or familiarity with Big Data Platforms or Data Lake architectures is a plus.

Skills

• Threat hunting and operational research.
• Statistical analysis and hypothesis testing.
• Model building and testing.
• Data visualization and interpretation.
• Advanced statistical modeling.
• Collaboration and communication with stakeholders.
• Customer support and training.
• Documentation and presentation of findings.
• Cloud provider and environment familiarity.
• Cyber hunt methodologies and techniques.
• SIEMs and SOARs.
• Threat detection signature development.
• Data collection and analysis.
• Vulnerability recognition and attack categorization.
• Network traffic analysis.
• Cyber attack stages and incident response.
• Intrusion Detection and Prevention Systems.
• Public speaking and presentation skills.
• Organizational and attention to detail skills.
• Teamwork and flexibility.
• Training event support.
• Writing and documentation skills.

Benefits

• 100% paid employee premium for healthcare, vision and dental plans.
• 10% 401k benefit.
• Generous PTO + 10 paid holidays.
• Education/training allowances.