Data Cyber Hunt Analyst (Hybrid)

Polaris is looking for an experienced Data Cyber Hunt Analyst with Data Science experience to apply strong cyber security, Defensive Cyber Operations (DCO) and networking domain knowledge to support cyber analytics product development and model development, threat analysis, and direct customer mission support. Work is performed in a hybrid environment on customer site in Fort Meade, MD. 

Essential Job Responsibilities

• The Data Cyber Hunt Analyst will utilize their expertise in machine learning, statistical data analytics, and predictive analytics to help create and implement data solutions and analytics for diverse United States Space Force (USSF) data sets. Regular activities consist of hunting for threats, reporting on findings, and converting tools, techniques and processes into automated capabilities for the current cyber platform. 
• Will also be responsible for collecting customer Cyber Operations requirements, generating use cases, providing Cyber SME support and system training to end users.
• Ability to multi-task in a deadline-oriented environment.
• Demonstrated ability to work well independently with little input, and as a part of a team.
• Other duties as assigned.

Minimum Qualifications

• Security Clearance - A current Secret level U.S. Government Security Clearance is required; U.S. Citizenship required. 
• 3 years experience with Masters; OR 5+ years of experience in cyber security operations related fields and a Bachelors in related field; OR High School Diploma and 9 years experience. 
• Knowledge of Defensive Cyber Operations (DCO), including threat hunting methodologies.
• Technical experience with cyber data analysis to include continuous monitoring, intelligence, and reporting.
• Proficient in various query languages (SQL, KQL (Kusto).
• Python experience, and bonus for experience using Jupyter notebooks.
• Experience with dashboarding/visualizations (Power-Bi, Superset, Kibana). 
• Ability to abstract threat hunting concepts to look at the ‘big picture’ and discover threats that aren’t captured by traditional methods (e.g. SIEMs).
• Experience in big data hunting analysis and reporting.
• Developing and deploying threat detection signatures.
• Detecting host and network-based intrusions.
• Advanced experience in using cyber tools, defensive toolkits, endpoint and network sensors, SIEMs, and threat sharing platforms (e.g. MISP).
• Advanced experience with the MITRE ATT&CK framework and associated TTPs.
• Leverages an understanding of enterprise IT infrastructure, systems monitoring, and networking to identify suspicious patterns and behaviors within the ecosystem.
• Excellent verbal, written, analytical, and presentation skills.
• Excellent work ethic and a high commitment to quality.
• Must be able to work on customer site in Fort Meade, MD 3-4 days/week. Flexibility is essential to adapt to schedule changes as needed.

Preferred Requirements

• Prior experience interfacing, consulting and training customers is a big plus.
• Minimum of Security+ certification.
• Experience with DoD data types and current DoD Data Strategies.
• Experience with US Air Force.