Principal Cyber Security Analyst

Navy Federal•Pensacola, FL

2d•Onsite

About The Position

Navy Federal Credit Union is seeking an experienced information security professional to join its Cybersecurity Operations team as a senior threat analyst. The role supports the Cybersecurity Operations Center’s strategic vision and works closely with the Focused Operations manager, leading collaboration with other Information Security teams on control validation and threat-hunt operations. Navy Federal does not provide sponsorship for this role; applicants must be authorized to work in the United States without current or future sponsorship.

Requirements

Advanced knowledge of Windows and non-Windows operating-system concepts and fundamentals.
Advanced skill evaluating large endpoint and network event datasets for abnormalities, including baseline analysis.
Advanced experience in cybersecurity and/or IT security.
Advanced knowledge of security architectures, firewalls, proxies, and network topology.
Advanced skill developing and deploying custom content queries.
Advanced skill using security event-correlation tools such as Splunk or ELK.
Advanced skill hunting host- and network-based intrusions through intrusion-detection technologies.
Outstanding communication skills for reporting complex technical situations to executive leadership, nontechnical staff, and other audiences.
Advanced research, analytical, and problem-solving skills.
Advanced skill working with all levels of management, supervisors, stakeholders, and vendors.
Expert skill collaborating with other teams on time-sensitive incidents.
Applicants must be authorized to work in the United States without current or future sponsorship; Navy Federal Credit Union does not provide sponsorship for this role.

Nice To Haves

Advanced skill identifying gaps in technical capabilities.
Advanced skill in relevant programming languages such as C++ or Python.
Advanced skill testing and evaluating tools for implementation.
Advanced experience with enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic-analysis, and SIEM tools.
CISSP, CISA, CCSP, or another related Information Security certification.
Advanced knowledge of IT security standards and frameworks such as MITRE ATT&CK.
Advanced skill analyzing cloud-technology audit-log events to support development of cyber defense detections.

Responsibilities

Maintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs), as well as forensics and incident response practices across Windows and non-Windows environments.
Identify and hunt for unknown threat activity across Windows and non-Windows environments using non-standard analytics.
Lead development of requirements for test plans used in adversary emulation to support threat-hunt development.
Conduct threat hunts using advanced analytic techniques, including event reconstruction, tracing suspicious processes, and extracting custom data points for holistic reporting and findings.
Analyze network and endpoint events from enterprise sources and determine their impact.
Analyze log files, forensic evidence, and other information to determine effective endpoint intrusion detection methods.
Drive development of non-standard analytic queries for cyber defense tools in response to new or observed threats in Windows and non-Windows environments.
Improve event-correlation processes across the enterprise to identify security-architecture and logging gaps.
Examine network topologies to understand how data flows through the network.
Provide leadership with cybersecurity recommendations based on significant threats and vulnerabilities.
Assist leadership in maturing threat-hunt standards, taxonomy, and processes.
Perform other duties as assigned.