Lead Cyber Defense Threat Analytics Engineer (Remote Work Option)

Open to remote work except in South Dakota, Vermont and West Virginia.

Information about benefits can be found here.

WHO YOU’LL WORK WITH

This role will drive technical leadership supporting Cyber Threat Analytics (CTA) mission within our Cyber Defense organization. CTA includes seasoned cyber security operations and engineering professionals, data scientists, and IT professionals with years data and analytics experience.

WHO WE ARE LOOKING FOR

We’re looking for a well-adapted professional to help drive our program aligning our security data with enhanced AI and ML techniques to increase speed and efficiency of our Detect and Respond capabilities.  This individual should be rational and balanced, understanding risks and presenting logical concerns and solutions while maintaining a high level of professionalism and discretion. The ideal candidate has information security experience, is a validated problem solver and adept at making good decisions under pressure. What you bring:

• Bachelor Degree or a combination of relevant education, training and experience
• Five years of information technology experience with preferred three years in a cyber security related role
• Extensive experience in data engineering and data lakehouse development, particularly with Databricks.
• Proficient in programming and scripting languages such as Python, JavaScript, and Go.
• Skilled in AWS Cloud engineering and CI/CD pipeline development.
• Experience developing and supporting full-stack applications
• Familiar with search platforms, including Splunk, Devo, and SumoLogic, as well as Security Information and Event Management (SIEM) tools.
• Strong written and oral communication skills
• Experience collaborating with other internal or external organizations regarding security policy and standards violations, security controls failure and incident response situations
• Must be credible in keeping sensitive data confidential
• Additional skills and qualifications preferred, but not required:
  • Experience with implementing GenAI and ML for Cyber Security use cases
  • Certified Big Data Administrator/Architect
  • Knowledge of machine learning and anomaly detection techniques
  • Experience working with insider threat teams identifying or triaging suspicious activity
  • Experience demonstrating automated server configuration tools (such as Puppet or Chef)
  • Consistent track record of success in fast paced organizations with sophisticated technology applications
  • One or more of the following professional certifications
    • Certified Information Security Professional (CISSP)
    • Global Information Assurance Certifications (GIAC)
  • Working in an agile environment.

WHAT YOU’LL WORK ON

If this is you, you’ll be working with the Cyber Threat Analytics team and performing these key tasks:

• Automate and optimize data ingestion, transformation, and storage processes while integrating scalable AI/ML models into cyber security systems to enhance detection workflows.
• Develop reliable databases and distributed systems for managing complex security datasets, ensuring scalability and efficiency across diverse environments.
• Collaborate with Detection Engineers to implement machine learning algorithms and advanced analytics tools for improved threat identification and validation processes.

We offer a number of accommodations to complete our interview process including screen readers, sign language interpreters, accessible and single location for in-person interviews, closed captioning, and other reasonable modifications as needed. If you discover, as you navigate our application process, that you need assistance or an accommodation due to a disability, please complete the Candidate Accommodation Request Form.