Principal Data Security Scientist - Remote

Overview

Aquia Inc. is a digital services firm specializing in cloud infrastructure, cybersecurity, and compliance automation for the U.S. government. They are seeking a Principal Data Security Scientist with deep Splunk expertise and a passion for proactive cyber threat hunting.

In Short

• Lead and mentor a team in threat detection and Splunk development.
• Proactively hunt for threats using Splunk.
• Analyze log data to identify anomalies and suspicious patterns.
• Develop custom searches and detection models in Splunk.
• Collaborate with SOC and refine alert thresholds.
• Communicate insights and recommendations effectively.
• Support continuous improvement of detection processes.
• Utilize frameworks like MITRE ATT&CK for threat modeling.
• Document detection methodologies and findings.
• Engage with stakeholders to align priorities with mission goals.

Requirements

• 7+ years of experience in cybersecurity analytics or detection engineering.
• Advanced proficiency in Splunk and SPL.
• Experience in discovering unknown cyber threats.
• Familiarity with log sources across various platforms.
• Strong communication skills for stakeholder engagement.

Benefits

• Premium health care plans (90% employer-paid).
• Employee stock plan.
• 100% 401k match (up to IRS annual max).
• Generous PTO package.
• Personal training and development budget.