Job Description

Duties and ResponsibilitiesThe Data Science team is responsible for developing key Threat Detection capabilities for Ensign InfoSecurity as a whole. With this responsibility in mind, the team understands current research methods & determines its applicability to the Cyber domain, develops & deploys Threat Detection models and explores the state-of-the-art boundary.With the numerous tasks at hand and the commercial projects undertaken, we require an high performing intern to partner us in these efforts.(Broad based Understanding: Cybersecurity and Data Science) Understand Models & Use-cases for Cybersecurity Understand the various logs for Cybersecurity Understand Models & Use-cases in Ensign(Operations Focused) Build a detection model for a MITRE Technique Business understanding: Understand MITRE Technique Data understanding: Explore network/ endpoint log samples Modeling: Define detection model & approach Modeling: Build working prototype Deployment: Structure code for deployment Evaluation: Examine alerts and fine-tune model/ approach Evaluation: Present to stakeholders(Research Focused)[Has a simulation component, but also model building component] Code Simulation + Detection Specific to a given category (e.g. network connection action) (Part1) for a few common network actions/implementations, combine multiple code chunks and compile to generate binary, (Part2) parse binary to get abstract representation (need to define optimal representation) (Part3) use the abstract representation as model input for classification (likely using deep learning)
Not Specified