The National Incident Response Team (NIRT), a national service provider for the Federal Reserve System, delivers effective and efficient national intrusion detection, incident response, security intelligence, threat assessment, and vulnerability assessment services for the Federal Reserve System. The mission of the National Incident Response Team is to play a leading role in the Federal Reserve System's efforts to protect its information systems against unauthorized use.
The mission of NIRT's Incident Detection and Analysis (IDA) team is to be an agile team that effectively detects, analyses and investigates information security incidents for its customers. The team is focused on ensuring the security and integrity of critical enterprise systems and environments through the use of various analytical data mining techniques and automated tactics.
Your role as a Cyber Security Data Scientist:
As a Cyber Security Data Scientist, you are primarily responsible for advancing the NIRT's threat detection strategy through the blended application of mathematical and computer science methodologies and techniques. You are also responsible for expanding the team's data science capabilities by assessing and training team members; you will serve as a data science subject matter expert for the NIRT. Furthermore you will execute core detection responsibilities in order to remain familiar with operational data.
Build, deploy, and monitor predictive models using supervised and unsupervised learning methods to improve threat detection.
Develop statistical tests to make data-driven recommendations and decisions.
Find new uses for existing data sources and makes recommendations for the acquisition of new sources of information.
Provide recommendations to engineering teams on best practice approaches to data warehousing.
Apply machine learning and data mining skills to correlate datasets and events to develop dynamic security alerts.
Investigate security incidents through data analysis and information gathering.
Produce reports and presentations to illustrate results of data science activities.
Collaborate with other teams to improve detection capabilities holistically.
Assess and train detection analysts to expand the IDA team's data science capabilities through the development of a remote and onsite data science training package that supports individual and team training.
Ability to work weekends on a rotational basis with the rest of the team to ensure 24x7 coverage of Threat Analysis Center (TAC).
What we are looking for:
Ability to obtain and maintain National Security Clearance, which includes Those authorized to work in the United States without sponsorship are encouraged to apply.ship.
At Lead level, typically requires 8+ years of combined IT and security work experience with a broad range of exposure to systems analysis, application development, systems administration and over 5 years experience in relevant computer network defense discipline and at Principal level, typically requires 12+ years of combined IT and/or security work experience with a broad range of exposure to systems analysis, application development, systems administration and over 7 years in relevant computer network defense, computer network exploitation, cyber intelligence or engineering principles discipline
4+ years of Data Scientist experience.
Hands on experience performing incident detection and analysis in a 24x7 operational environment is a plus.
Proven ability to collaborate, build relationships and influence individuals at all levels in a matrix-management environment.
Strong Machine Learning and Natural Language Processing skills.
Strong experience with data mining and analytic methods (e.g., clustering, sequences, time series, deep learning, statistical analytics)
Strong mathematical background (e.g., linear algebra, calculus, probability and statistics)
6+ months of cybersecurity experience with a preferred interest in reviewing and analyzing security events from various monitoring and logging sources to identify and/or confirm suspicious activity.
Working knowledge of cloud computing technology is preferred but not required.
Working knowledge of Microsoft Office products, including Visio and Project.
At a minimum a M.S. degree in Computer Science, Statistics, or Engineering or an equivalent combination of education and work experience
The Federal Reserve Bank of San Francisco is an Equal Opportunity Employer. Our people proudly reflect the diversity and ideas of the communities we serve.