- Lead the design and implementation of technical data science solutions supporting enterprise
cybersecurity operations.
- Develop data models and automation capabilities that enhance security monitoring, detection,
threat hunting, UEBA, and correlation of cybersecurity information across the ICE enterprise.
- Design and implement custom algorithms, analytical processes, and data architectures for
complex enterprise scale data sets used for modeling, data mining, research, and cyber defense.
- Develop advanced analytical capabilities supporting predictive risk analysis, risk identification, risk
mapping, cyber risk cost analysis, supply chain threat identification, and User and Entity Behavior Analytics.
- Design data pipelines and workflows that ingest, normalize, correlate, and analyze information from
multiple disparate security and enterprise data sources.
- Develop machine learning algorithms and models to identify anomalous behavior, emerging cyber
threats, attack patterns, and other indicators of malicious activity.
- Develop metrics and trending analysis covering enterprise security anomalies, threat actor activity
and impact, user behavior anomalies, and other relevant cybersecurity data.
- Apply data science and automation to cyber threat hunting activities to increase analytical maturity
and reduce manual investigative processes.
- Incorporate data science modeling into operational threat hunting and support predictive threat
simulations designed to estimate cyber attack probability and potential cost or impact.
- Develop capabilities that correlate cyber threat intelligence with assets, users, and security events
to evaluate the potential financial and operational impact of cyber incidents.
- Support development of custom Indicators of Compromise and Indicators of Attack detection and
alerting mechanisms.
- Develop visualizations, dashboards, and other high visibility reporting capabilities that
communicate complex cybersecurity data, trends, risks, and analytical findings to technical and leadership audiences.
- Design and develop automation supporting security tool administration, cybersecurity analytics,
customized searches, and security applications.
- Support integration of analytical capabilities with Security Information and Event Management and
Security Orchestration, Automation, and Response platforms.
- Support ICE User and Entity Behavior Analytics capabilities and the development, integration,
optimization, and maintenance of security data analytics capabilities.
- Identify and resolve critical data quality, integrity, architecture, and analytical issues affecting
cybersecurity capabilities.
- Support development of repeatable and scalable analytical processes that improve detection,
investigation, response, and proactive defense operations.