Model Based Systems Engineer LD

Northstrat is seeking a highly motivated Model Based Systems Engineer who will play a critical role in ensuring the successful acquisition and management of mission-critical and mission support data sets. You will work closely with our team of experts to design and implement data solutions that meet the unique needs of our clients in the military space. Whether you have experience as a developer, analyst, or engineer, we want to hear from you. Your expertise in this area will be invaluable as we work to provide our clients with the highest quality data solutions possible. The successful candidate will have an understanding of data structures, algorithms, and software design principles, as well as experience working with large and complex data sets. They will work closely with our engineers to build and optimize our data pipeline and analytics systems. As a hybrid role, this position will require some on-site work, but you will also have some flexibility to work remotely.

You will be part of a dynamic team of professionals who are passionate about their work and committed to delivering exceptional results. If you are a self-starter who thrives in a fast-paced environment and is eager to take on new challenges, we encourage you to apply for this exciting opportunity.

Essential Job Responsibilities

• Conduct threat hunt operations on assigned Big Data Platform(s) – BDP

• Present threat hunt findings through live - interactive remote conference sessions

• Perform data analytics across disparate data sets

• Assist customer(s) with their threat hunting operations

• Perform quality assurance checks on data that is resident on the BDP

• Evaluate and analyze new data feeds to determine relevance and useability of data

• Support BDP analytic requests (data search, visualizations, dashboards.etc)

• Provide real time customer support during normal working hours (BDP support chat room)

• Maintain situational awareness of emerging cyber threats for possible action and notification to an impacted customer(s)

• Support BDP demonstration requests to showcase various capabilities of the platform

• Support BDP training events either in person or virtually

• Provide advice on data enrichment and functions to enhance customer experience

• Additional duties as assigned

Requirements

• Musth have an active TS/SCI level U.S. Government Security Clearance and must be a U.S. Citizenship is required.

• Must have at least 9 years of relevant experience with Bachelor’s Degree in Information Technology, Cyber Security or similar field; 7 years relevant experience with Masters in related field; or High School Diploma or equivalent and 13 years relevant experience

• Minimum 3 years of experience in cyber security operations related fields.

• Excellent public speaking, presentation, and customer service skills

• Proficient in various query languages (SQL, Lucene, JEXL, KQL (Kusto and Kibana))

• Python experience is a must

• Experience with dashboarding/visualizations (Power-Bi, Superset, Kibana)

• Familiarity with cloud providers and environments (Azure, AWS, Google Cloud Platform)

• Experience with SIEMs - (e.g., Splunk, Q-Radar, ArcSight, ELK) SOARs (e.g., Sentinel, CORTEX, X-SOAR)

• Must demonstrate knowledge of developing and deploying threat detection signatures and detecting host and network-based intrusions

• Must have knowledge on collecting data from a variety of cyber defense resources. (e.g., CVE, OSINT)

• Familiarity with recognizing and categorizing types of vulnerabilities and associated attacks

• Experience with reading and interpreting signatures (e.g., SNORT, SIGMA, Yara, YML, XML)

• Knowledge with Network traffic analysis methods (e.g.,TCP-DUMP, Wireshark, Bro/Zeek)

• Familiar with cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks), and incident response and handling methodologies. (e.g., MITRE ATT&CK, LM Killchain)

• Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications

• Must be able to obtain Security+ certification within 60 days of hire

• Must be able to work in a hybrid environment, spending one average 2 days a week onsite in San Antonio, TX. Flexibility is essential to adapt to schedule changes as needed.

Preferred Requirements

• DoD SOC experience is a plus.