Job Title: Cyber Specialist – Cyber Data Consumption & Enablement
Contract Duration: 6 months, possible extension
Location: St. Paul, MN
Work Arrangement: Onsite
Pay: $50-$53
Summary
We are seeking a Cyber Data Consumption & Enablement Specialist to drive adoption, accessibility, and business value realization of the Cyber Data Lake. This is an internal customer-facing role that serves as the bridge between the Cyber Data Lake platform and its consumers, helping teams transform cyber telemetry into actionable security, compliance, operational, and business insights.
The successful candidate will partner with cybersecurity, product security, engineering, audit, compliance, and analytics stakeholders to help them discover, access, understand, analyze, and operationalize available datasets. This role owns the consumer experience after data has been onboarded and made available in the platform.
This position focuses on data consumption, user enablement, analytics support, operational data quality monitoring, and platform adoption. Data source intake, onboarding governance, connector implementation, onboarding approvals, and data governance processes are owned by the Cyber Specialist – Cyber Data Onboarding & Governance role and are not part of this position.
Responsibilities
Consumer Enablement & Adoption
- Serve as the primary point of contact for Cyber Data Lake consumers after datasets are available for use.
- Conduct consumer onboarding sessions, workshops, office hours, and stakeholder working sessions to help users discover, access, and utilize available Cyber Data Lake datasets.
- Develop and maintain consumer training materials, knowledge articles, FAQs, and adoption resources.
- Help users understand available datasets, platform capabilities, and supported use cases.
- Gather stakeholder feedback and identify opportunities to improve the consumer experience.
- Measure onboarding effectiveness, consumer engagement, and platform adoption.
Dataset Discovery & Data Consumption
- Enable consumers to discover, access, and understand available cyber datasets.
- Maintain consumer-facing dataset catalogs, usage guidance, and reference documentation.
- Assist users in identifying appropriate datasets for security, compliance, audit, operational, and analytics use cases.
- Support query development, reporting, dashboarding, KPI creation, and analytics initiatives.
- Facilitate analytics working sessions and consumer testing activities.
- Promote best practices for cyber data consumption and analysis.
Security Analytics, Detection & Investigation Enablement
- Partner with Detection Engineering, Security Operations, and Product Security teams to maximize the value of available telemetry.
- Validate telemetry availability and accessibility for security monitoring and detection use cases.
- Support detection use-case enablement, tuning, validation, and analytics activities.
- Assist investigators and analysts in locating relevant datasets and telemetry sources.
- Identify telemetry gaps impacting consumer use cases and provide consumption insights to onboarding and platform teams to support prioritization and remediation decisions.
- Support security analytics and SIEM use cases without performing operational incident response activities.
Audit, Compliance & Assurance Enablement
- Enable audit, quality, compliance, assurance, and regulatory stakeholders to effectively leverage Cyber Data Lake datasets.
- Support audit evidence requests, compliance reporting activities, and assurance use cases.
- Assist stakeholders in identifying telemetry that supports audit and regulatory requirements.
- Maintain audit and compliance usage guidance and support documentation.
- Identify telemetry gaps that could affect audit readiness or compliance reporting.
Data Quality & Consumer Experience Monitoring
- Monitor operational health of onboarded datasets from a consumer perspective.
- Monitor consumer-impacting data quality, availability, latency, and telemetry usability issues and coordinate remediation with platform engineering teams.
- Coordinate with platform and engineering teams to resolve data quality issues affecting analytics, reporting, detections, investigations, or audits.
- Publish data quality metrics, scorecards, and consumer-impact assessments.
- Escalate significant issues that impact platform usability or consumer outcomes.
Platform Adoption, Utilization & Value Realization
- Measure and report on platform adoption, utilization, and business value realization.
- Track active consumers, dataset utilization, analytics adoption, and reporting usage.
- Identify underutilized datasets and opportunities to expand consumer adoption.
- Develop executive reporting and dashboards highlighting platform value and outcomes.
- Support forecasting, capacity planning, and strategic growth initiatives through consumption and utilization insights.
- Recommend opportunities to improve platform effectiveness, consumer outcomes, and telemetry coverage.
Required Qualifications
- 5+ years of experience in cybersecurity, security analytics, cyber operations, data analytics, SIEM platforms, or cybersecurity data platforms.
- Experience with modern data lake, lakehouse, or analytics platforms such as Databricks, Snowflake, BigQuery, Azure Data Explorer, Synapse, or similar technologies.
- Experience with Security Information and Event Management (SIEM) and security analytics platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, Chronicle, ArcSight, or equivalent technologies.
- Experience writing and optimizing SQL queries to support analytics, reporting, dashboarding, and security investigations.
- Strong understanding of cybersecurity telemetry, logging, monitoring, security analytics, and cyber data consumption use cases.
- Experience supporting internal customers in a technical enablement, consulting, or customer-success role.
- Experience with reporting, dashboarding, analytics, and data consumption use cases.
- Experience with SIEM platforms, security data lakes, or large-scale telemetry environments.
- Strong communication, stakeholder management, and training skills.
- Experience operating in regulated and global environments.
- Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, Data Analytics, or equivalent experience.
Preferred Qualifications
- Experience developing user training programs, adoption frameworks, technical documentation, or customer-success initiatives.
- Experience supporting audit, compliance, assurance, or regulatory reporting activities.
- Experience supporting telemetry from connected products, IoT environments, or medical device ecosystems.
- Program or project management experience.
- Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or similar credentials.
#LI-MM1