Principal Cyber Threat Analyst

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $94.2k - $141.2k / year

⏰ Full Time

🔴 Lead

🕵️ Threat Intelligence Specialist

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Northrop Grumman

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1939

🏭 Manufacturing

📦 Logistics

🎖️ Defense

Manufacturing • Logistics • Defense

Northrop Grumman is a leading global aerospace and defense company, recognized for its innovative solutions in air, cyber, land, sea, and space domains. With a focus on advanced technologies and innovation, Northrop Grumman provides unmatched expertise in military communications, satellite communications, and microelectronics manufacturing. The company is committed to solving complex challenges and 'defining possible' by transforming the concepts of what's achievable. Northrop Grumman is also actively involved in sustainability efforts and offers career opportunities to various levels of professionals, including veterans and entry-level candidates.

📋 Description

• Perform analytical triage of cyber events using commercial and custom applications, systems, and tools • Analyze host- and network-based logs • Correlate network indicators and PCAP data • Conduct forensic analysis of system images • Generate event timelines and perform root cause analysis • Prepare detailed written event analyses • Brief findings to technical and non-technical audiences • Conduct all-source research on cyber threat actors and intrusion sets, including APTs • Evaluate technical and intelligence reporting for cyber threat activities • Support informational and analytic products that increase situational awareness and provide advanced warning of current and emerging cyber threats and risks • Analyze incidents, threats, risks, impacts, consequences, vulnerabilities, tactics, techniques and procedures, and other indicators • Collaborate daily with I&R team members and Strategic CI analysts to coordinate threat mitigation • Identify and counter sophisticated cybersecurity and cyber threats across the Northrop Grumman Managed Network (NGMN)

🎯 Requirements

• 5 Years of relevant experience with a Bachelors in Science; OR 3 Years with Masters; OR 1 Years with PhD. • Ability to obtain and maintain a U.S. Government Top Secret level security clearance as a condition of continued employment • U.S. Citizenship is required for positions with a government clearance • Ability to prepare and analyze data and figures • Experience with two or more analysis tools used in a SOC/CIRT or similar investigative environment • Minimum of 2 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations • Minimum of 4 years of experience with Python, PowerShell or other scripting language • Ability to prepare detailed written analyses and briefings for technical and non-technical audiences • Demonstrated awareness of current endpoint and network exploits • Familiarity with computer network exploitation methodologies and tools • Understanding of network communication protocols at all layers of the OSI model • Experience with large data sets, high-performance computing systems, and artificial intelligence (AI) tools • Experience with endpoint detection and response technologies • Experience with cyber threat intelligence methodologies • Linux/Unix and Windows proficiency, including shell (Bash, PowerShell) scripting • Familiarity with current cybersecurity threats facing U.S. defense contractors or the U.S. Government • One or more preferred technical certifications or equivalent: GCED, GCIH, GCIA, GCFA, GREM, CFCE, EnCE, ACE, CCNA, CISSP, etc.

🏖️ Benefits

• Flexible work arrangements • Phenomenal learning opportunities • Exposure to a wide variety of projects and customers • Friendly team environment • Exceptional benefits/healthcare • Life and disability insurance • Savings plan • Company paid holidays • Paid time off (PTO) for vacation and/or personal business • 9/80 work schedule • 401k matching program • Potential eligibility for overtime • Potential eligibility for shift differential • Potential eligibility for discretionary bonus • Potential eligibility for long-term incentives for Vice President or Director positions