Infinity Quest
Data Scientist
Leeds
Posted about 16 hours ago
Get notified of more jobs like this · No spam, ever
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Role Purpose
Lead the design, engineering, and operationalization of enterprise Security Knowledge Graphs that connect security telemetry, assets, identities, vulnerabilities, threats, controls, and incidents into a trusted intelligence layer. The role is highly hands-on and combines data science, graph engineering, cybersecurity analytics, semantic modeling, and technical leadership to enable attack-path analysis, threat investigation, exposure prioritization, GraphRAG, and AI-assisted security operations.
Key Responsibilities
- Design the Security Knowledge Graph architecture, ontology, taxonomy, entity model, relationship model, provenance model, and lifecycle standards.
- Build production-grade graph ingestion and transformation pipelines for SIEM, EDR/XDR, IAM/PAM, CMDB, vulnerability scanners, cloud security platforms, threat intelligence feeds, security data lakes, and case-management systems.
- Develop entity extraction, identity resolution, deduplication, schema mapping, relationship inference, confidence scoring, temporal modeling, and graph enrichment capabilities.
- Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures.
- Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization.
- Build and evaluate graph algorithms and ML models including centrality, community detection, similarity, anomaly detection, node classification, link prediction, embeddings, and Graph Neural Networks.
- Design GraphRAG and knowledge-grounded security assistants that combine graph traversal, vector retrieval, structured evidence, LLM reasoning, citations, and human approval controls.
- Partner with SOC, threat intelligence, IAM, vulnerability management, cloud security, architecture, data engineering, and product teams to convert operational problems into reusable graph-powered capabilities.
- Own technical design reviews, coding standards, model validation, observability, performance tuning, security controls, documentation, and production-readiness gates.
- Mentor data scientists and engineers while remaining accountable for prototypes, reference implementations, critical code, troubleshooting, and complex customer or stakeholder demonstrations.
Mandatory Hands-on Technical Skills
- Knowledge graphs: Ontology and semantic model design; property graphs and RDF; graph schema evolution; knowledge representation; provenance; graph quality; entity and relationship resolution.
- Graph platforms: Deep implementation experience with Neo4j and Cypher; working knowledge of at least one additional platform such as Amazon Neptune, TigerGraph, Azure Cosmos DB Gremlin, ArangoDB, or JanusGraph.
- Graph data science: Neo4j Graph Data Science, NetworkX, PyTorch Geometric or DGL; graph embeddings, pathfinding, similarity, clustering, link prediction, node classification, anomaly detection, and GNN development.
- Programming and engineering: Advanced Python and SQL; APIs; test automation; data structures; distributed processing; Git; CI/CD; containers; infrastructure awareness; production debugging and performance optimization.
- Data engineering: Spark or Databricks, Kafka or equivalent streaming, ETL/ELT, batch and real-time pipelines, data contracts, lineage, cataloguing, quality rules, and scalable cloud storage.
- Cybersecurity: SOC workflows, threat hunting, incident response, detection engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping.
- Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies.
- GenAI and GraphRAG: LLM-based extraction, retrieval orchestration, agent/tool integration, prompt design, evaluation, grounding, guardrails, explainability, and evidence traceability.
- MLOps and observability: Experiment tracking, model versioning, deployment, monitoring, drift and quality checks, auditability, access controls, secrets management, and cost/performance management.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Knowledge Graph Engineering Expectations
- Create canonical entity and relationship definitions with stable identifiers, temporal context, source lineage, evidence attributes, confidence scores, and access-control classifications.
- Develop reusable connectors and parsers for structured, semi-structured, and unstructured security sources; implement incremental loading, event-time handling, reconciliation, and recovery patterns.
- Engineer mappings between enterprise security data and standards such as MITRE ATT&CK and STIX while managing versioning, extensions, and organization-specific concepts.
- Design query patterns, graph projections, indexes, constraints, partitioning strategies, retention policies, and caching approaches for high-volume investigative workloads.
- Establish graph quality metrics covering completeness, consistency, freshness, uniqueness, referential integrity, semantic accuracy, and unexplained relationship growth.
- Implement privacy, least-privilege access, tenant or business-unit segregation, audit logging, encryption, secure development, and responsible AI controls.
Illustrative Use Cases
- Attack-path discovery from internet-facing assets to critical applications or privileged identities.
- Identity and privilege-risk analysis across users, service accounts, roles, entitlements, devices, applications, and cloud resources.
- Threat-intelligence fusion linking indicators, malware, campaigns, threat actors, observed telemetry, vulnerabilities, and affected assets.
- Incident investigation timelines, alert correlation, root-cause analysis, blast-radius assessment, and recommended containment evidence.
- Risk-based vulnerability prioritization using exploit context, asset criticality, exposure, compensating controls, active threats, and graph proximity.
- Graph-grounded security copilots for natural-language investigation, explainable recommendations, detection engineering, and analyst productivity.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Leadership & Stakeholder Responsibilities
- Define the technical roadmap, reference architecture, reusable accelerators, engineering backlog, and adoption plan for the Security Knowledge Graph capability.
- Facilitate architecture workshops and communicate trade-offs, risks, dependencies, and business value to security leaders, architects, product owners, and engineering teams.
- Lead design and code reviews; coach teams on graph modeling, data science rigor, cybersecurity context, and reliable AI engineering.
- Coordinate with governance, privacy, legal, risk, and Responsible AI stakeholders to ensure transparent, accountable, and human-supervised use of AI.
- Support solution estimation, delivery planning, technical proposals, demonstrations, and executive-level presentations.
Required Qualifications
- Bachelor’s or Master’s degree in Computer Science, Data Science, Artificial Intelligence, Cybersecurity, Engineering, or a related discipline.
- Demonstrated ownership of at least one production knowledge graph or graph analytics solution, preferably in cybersecurity.
- Strong portfolio of hands-on Python and graph-query development, data pipeline engineering, testing, and production deployment.
- Ability to translate complex security problems into data models, algorithms, measurable experiments, scalable services, and clear technical documentation.
- Excellent communication, mentoring, problem-solving, and cross-functional leadership capabilities.
Preferred Qualifications
- Experience with cloud-native security and data services on Azure, AWS, or Google Cloud; enterprise graph platforms; modern lakehouse architectures; and security copilots or agentic AI patterns.
- Relevant certifications such as CISSP, CISM, GIAC, cloud security, cloud AI/data, or Neo4j Graph Data Science are advantageous but not mandatory.
Key Deliverables and Success Measures
- Approved Security Knowledge Graph architecture, ontology, governance model, and phased implementation roadmap.
- Production-grade ingestion, entity-resolution, enrichment, graph analytics, API, and GraphRAG components with automated tests and operational documentation.
- Measurable improvement in investigation speed, attack-path visibility, correlation quality, vulnerability prioritization, analyst productivity, and explainability.
- Reliable service performance demonstrated through data-quality thresholds, query latency and scale targets, monitoring, security reviews, adoption, and stakeholder acceptance.
- Sustainable engineering capability through reusable assets, standards, knowledge transfer, mentoring, and a prioritized innovation backlog.
Ideal Candidate Profile
A credible technical leader who can move seamlessly from a CISO-level discussion to ontology design, Python development, Cypher optimization, graph algorithm selection, model evaluation, and production troubleshooting. The successful candidate combines cybersecurity depth with strong data-science discipline and builds trustworthy graph-powered solutions that improve real security decisions, not just demonstrations.
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location