Sr. Principal Cyber Threat Analyst
About The Position
Northrop Grumman’s Corporate Sector Chief Information & Digital Office (CIDO) is seeking a Senior Principal Cyber Threat Analyst to support the CISO & Global Cybersecurity organization's Intelligence and Response (I&R) team. The position provides counterintelligence and cyber threat protection for Northrop Grumman intellectual property, networks, and sensitive data against skilled adversaries. The I&R team analyzes current network- and host-based threat activity, assesses emerging trends, monitors counterintelligence portals, and works with Defense Industrial Base and government peers to protect the Northrop Grumman Managed Network (NGMN). The analyst will investigate and mitigate cyber threat activity as part of a high-profile cybersecurity and counterintelligence team. The role involves identifying and countering sophisticated cyber threats across the NGMN, collaborating with I&R team members and Strategic CI analysts, and coordinating approaches to prevent current and future adversary actions. The candidate is expected to work adaptably and independently, show creativity and commitment to the mission, and communicate effectively in writing and verbally. The role requires analytical triage and prioritization of concurrent cyber events; host- and network-based log analysis; correlation of network indicators and PCAP data; event timeline generation; and root cause analysis. The analyst independently develops customized scripts to support analysis, prepares detailed written event analyses, and briefs findings to technical and non-technical senior management audiences. The position requires a current U.S. Government Top Secret clearance with SCI access and a recent polygraph. Travel is 10% of the time; relocation assistance is not available.
Requirements
- 8 years of relevant experience with a Bachelor of Science, or 6 years with a master's degree, or 4 years with a Ph.D.
- Current U.S. Government Top Secret security clearance with SCI access and a polygraph adjudicated within the last 5 years.
- Ability to prepare and analyze data and figures.
- Experience with two or more analysis tools used in a CIRT or similar investigative environment.
- At least 4 years of experience analyzing log data in support of intrusion analysis or cybersecurity operations.
- At least 4 years of experience with Python, Perl, or another scripting language.
Nice To Haves
- Awareness of current endpoint and network exploits and familiarity with computer network exploitation methodologies and tools.
- Understanding of network communication protocols at all layers of the OSI model.
- Experience working with large data sets, high-performance computing systems, and artificial intelligence tools.
- Experience working with endpoint detection and response technologies.
- Experience with cyber threat intelligence methodologies.
- Linux/Unix and Windows proficiency, including Bash or PowerShell scripting.
- Familiarity with current information security threats facing U.S. defense contractors or the U.S. Government.
- One or more preferred technical certifications or equivalent: GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), or Certified Forensic Computer Examiner (CFCE).
- Other vendor certifications, such as EnCE, ACE, CCNA, or CISSP.
Responsibilities
- Triage and prioritize concurrent cyber events.
- Analyze host- and network-based logs and correlate network indicators and PCAP data.
- Generate event timelines and conduct root cause analysis.
- Independently create customized scripts to facilitate analysis.
- Prepare detailed written analyses of cyber events.
- Brief findings to technical and non-technical senior management audiences.
- Identify and counter sophisticated cybersecurity and cyber threats across the Northrop Grumman Managed Network.
- Collaborate with I&R team members and Strategic CI analysts to coordinate threat mitigation.
Benefits
- Flexible work arrangements
- Learning opportunities
- Exposure to a wide variety of projects and customers
- Friendly team environment
- Health insurance coverage
- Life and disability insurance
- 401(k) matching program
- Company-paid holidays
- Paid time off for vacation and/or personal business
- Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
