Sr. Principal Cyber Threat Analyst

Northrop Grumman develops secure, integrated systems and technologies supporting strategic missions and global security objectives. The Senior Principal Cyber Threat Analyst will analyze and mitigate sophisticated cyber threats, conduct counterintelligence and threat protection activities, develop analytical scripts, and brief findings to technical and non-technical senior management.

Responsibilities:

• Analytical triage and prioritizations of concurrent cyber events, host and network based log analysis, correlation of network indicators and PCAP data, event timeline generation, and root cause analysis. The incumbent will be required to independently generate customized scripts to facilitate his/her analysis and prepare detailed written analyses of events. Additionally, they will often be required to brief their findings to both technical and non-technical senior management audiences

Requirements:

• 8 Years of relevant experience with a Bachelors in Science; OR 6 Years with Masters; OR 4 Years with PhD
• Candidates must have a current U.S. Government Top Secret levelsecurity clearance, to include SCI access and a recent Polygraph [adjudicated within the last 5 years],in order to be considered
• Must be able to prepare and analyze data and figures
• Must have experience with two or more analysis tools used in a CIRT or similar investigative environment
• Must have a minimum of 4 year of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations
• Must have a minimum of 4 years of experience with Python, Perl or other scripting language
• Demonstrated awareness of current endpoint and network exploits, familiarity with computer network exploitation methodologies and tools
• Understanding of network communication protocols at all layers of the OSI model
• Experience working with large data sets, high-performance computing systems, and artificial intelligence (AI) tools
• Experience working with endpoint detection and response technologies
• Experience with cyber threat intelligence methodologies
• Linux/Unix and Windows proficiency, including shell (Bash, PowerShell) scripting
• Familiarity with current information security threats facing U.S. defense contractors or the U.S. Government
• One or more of the following technical certifications (or equivalent) is preferred (GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), Certified Forensic Computer Examiner (CFCE)
• Other vendor certifications considered (e.g., EnCE, ACE, CCNA, CISSP, etc.)