CISPA Helmholtz Center for Information Security

Data Scientist

• Collaborate closely with our customers, engineering, product, and security teams to operationalize vulnerability models, ensuring scalability, reliability, and alignment with customer needs.
• Lead discovery and prioritization of customer security data sources (asset inventory, vuln scanners, EDR, IAM, CMDB, cloud posture, ticketing, external attack surface, threat intel), including feasibility, value, and effort trade-offs.
• Apply exposure-management domain expertise to ensure data supports actionable use cases (attack surface reduction, vulnerability prioritization, remediation workflows, risk acceptance, SLA tracking).
• Partner with engineering to design and validate ingestion pipelines (APIs, exports, streaming/batch), ensuring reliability, observability, and secure handling of customer data.
• Perform pragmatic data analysis to diagnose data issues and quantify impact (completeness, accuracy, timeliness, consistency), and recommend remediation steps to customers and internal teams.
• Define and maintain customer-facing technical documentation: integration guides, data dictionaries, validation checklists, and runbooks for common ingestion and modeling issues.
• Collect, clean, explore, analyze, and normalize various security data sources.
• Stay current on exposure-management practices, vulnerability intelligence, attacker tradecraft, and the relevant vendor ecosystem to inform integrations and customer guidance.