Data Scientist

• Conduct defensive cyber threat hunts on mission Big Data Platforms, evaluate suspicious activity, and translate findings into actionable operational recommendations.
• Apply statistical analysis, hypothesis testing, and model building and testing to reveal meaningful patterns in cyber and network data.
• Use data queries, dashboards, and visualizations to support customer analytic requests and present findings in live, interactive briefings.
• Support cyber teams using the Threat Awareness Sharing Capability (TASC) applications and mission data platforms such as JCRS-D.
• Partner with customers to identify cyber-operations requirements, operational gaps, use cases, and opportunities for improved data enrichment.
• Assess existing and proposed cyber data feeds for relevance, usability, completeness, and quality; document findings and deliverables.
• Use cyber-hunt methods, detection content, and emerging threat intelligence to support threat identification and awareness.
• Assist customer users with threat-hunting workflows, platform demonstrations, hands-on training, and timely operational support.
• Help translate repeatable threat-hunting methods and analytic processes into automated mission capabilities.

This position requires work at a customer site in Fort Meade, MD, five days (40 hours) per week. Travel may be required within the United States and internationally.

• U.S. citizenship and a current, active U.S. Government TS/SCI security clearance, with the ability to maintain that clearance.
• At least 9 years of relevant cyber-security operations experience with a bachelor’s degree in information technology, cybersecurity, or a related field; 7 years with a related master’s degree; or 13 years with a high-school diploma or equivalent.
• Experience supporting U.S. defense cyber-mission customers and presenting analysis to audiences with varied levels of technical knowledge.
• Proficiency with SQL and Kusto Query Language (KQL), plus experience using Python for analysis.
• Experience with dashboards and data visualization tools such as Power BI or Superset, and familiarity with cloud environments such as Azure, AWS, or Google Cloud.
• Knowledge of cyber-hunt methodologies; SIEM tools such as Splunk, QRadar, or ELK; and SOAR tools such as Sentinel, Cortex, or XSOAR.
• Experience developing or deploying threat-detection signatures, using cyber-defense sources such as CVE and OSINT, and interpreting detection content such as SNORT, SIGMA, YARA, or YAML.
• Experience with network-traffic analysis tools such as tcpdump, Wireshark, or Zeek; MITRE ATT&CK; incident-response methods; and IDS/IPS technologies.
• Strong customer communication, public-presentation, writing, documentation, and user-training skills; ability to work independently and collaboratively.
• Ability to meet the required five-day onsite schedule at a customer site in Fort Meade and travel up to 40% of the time, domestically and internationally.

What Would be Nice to Have

• Relevant certifications such as Data+, Security+, CySA+, GCIH, GNFA, or GCFA.
• Experience in a defense cyber security operations center (SOC).
• Familiarity with mission Big Data Platforms, data lakes, or related architectures.
• Experience using Jupyter notebooks in cyber-data analysis.

Pay Range: At GRVTY, we understand that compensation is influenced by many factors-such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications. We’re proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth. Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

• The pay range for this position is: $105,000 - $180,765