Principal Cyber Security Analyst

Navy Federal Credit Union; Vienna (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Navy Federal Credit Union is seeking a Senior Threat Analyst to join the Cybersecurity Operations team in Vienna, VA. This role focuses on threat hunting, advanced analytics, and develop threat-hunting capabilities across Windows and non-Windows environments.

You will collaborate with the Focused Operations manager and other Information Security teams to validate controls and advance threat-hunt operations, while maturing threat-hunt standards and processes.

Qualifications

• Advanced knowledge of Windows and non-Windows OS concepts.
• Advanced ability to evaluate large data sets for anomalies.
• Experience in cybersecurity or IT security.

Responsibilities

• Maintain expert knowledge of TTPs, forensics, and incident response for Windows and non-Windows environments
• Identify and hunt unknown threat activity across Windows and non-Windows environments
• Lead development of test plans for adversary emulation in threat hunts
• Conduct threat hunts using advanced analytics and event reconstruction
• Analyze network and endpoint events to assess impact of security incidents
• Develop non-standard analytic queries for cyber defense tools

Skills

Threat hunting

Windows

Forensics

Event correlation

Splunk

ELK

Adversary emulation

Executive communication

Tools

ELK Stack

IDS/IPS

Job description

Overview

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

At Navy Federal, we are passionate about our members- they are our mission. We're looking for a talented, experienced information security professional to join our growing Cybersecurity Operations team as a senior threat analyst.

The Cybersecurity Operations Center is looking for a driven professional to help advance the program's strategic vision. You will also have the opportunity to work closely with the Focused Operations manager and lead the collaboration with other Information Security teams for control validation and threat hunt operations.

Responsibilities

• Maintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs) as well as forensics and incident response practices for Windows and non-Windows platform environments
• Identify and hunt for unknown threat activity across Windows and non-Windows platform environments requiring non-standard analytics
• Lead development of requirements for test plans to perform adversary emulation in support of threat hunt development
• Conduct threat hunts using advanced analytic techniques (e.g., event reconstruction), following the lifecycle of suspicious processes and extracting custom data points for holistic reporting/findings
• Conduct advanced analysis of network and endpoint events from various sources within the enterprise and determine impact of such events
• Conduct advanced analysis of log files, forensic evidence, and other information to determine best methods for detection of an intrusion at the endpoint level
• Drive the construction of non-standard analytic queries, which can be implemented on cyber defense tools, in response to new or observed threats within the Windows and non-Windows enclave
• Drive process maturation to perform event correlation within the enterprise to identify security architecture and logging gaps
• Conduct advanced examination of network topologies to understand how data flows through the network
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities
• Aid leadership in maturation of standards, taxonomy, and processes for threat hunt
• Perform other duties as assigned

Qualifications

• Advanced knowledge of Windows and non-Windows operating system concepts and fundamentals
• Advanced skill in evaluating large data sets (endpoint and network events) for abnormalities (i.e., baseline analysis)
• Advanced experience in cybersecurity and/or information technology (IT) security
• Advanced knowledge of security architectures, firewalls, proxies, and network topology
• Advanced skill in developing and deploying custom content queries
• Advanced skill in using security event correlation tools (e.g., Splunk, ELK)
• Advanced skill in hunting host and network-based intrusions via intrusion detection technologies
• Outstanding communication skills for reporting complex technical situations to various audiences, including executive leadership and nontechnical staff.
• Advanced research, analytical, and problem-solving skills
• Advanced skill working with all levels of management, supervisors, stakeholders and vendors
• Expert skill in collaborating with other teams on time-sensitive incidents

Desired Qualifications

• Advanced skill in identifying gaps in technical capabilities
• Advanced skill in relevant programming languages (e.g., C++, Python, etc.)
• Advanced skill in testing and evaluating tools for implementation
• Advanced experience with security tools related to enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic analysis and SIEM
• CISSP, CISA, CCSP or other related Information Security certifications
• Advanced knowledge of IT security standards and frameworks (e.g., MITRE ATT&CK)
• Advanced skill in analyzing audit log events for cloud technologies to facilitate development of cyber defense detections

Additional Information

• Monday - Friday, 8:00AM - 4:30 PM

Locations

• 820 Follin Lane, Vienna, VA 22180
• 5550 Heritage Oaks Drive, Pensacola, FL 32526
• 141 Security Dr. Winchester, VA 22602

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE 100 Best Companies to Work For® 2026
• Yello and WayUp Top 100 Internship Programs 2025
• Computerworld® Best Places to Work in IT 2026
• Most Loved Workplace - America's Top Most Loved Workplaces® 2025
• 2025 PEOPLE® Companies That Care
• Newsweek Most Trustworthy Companies in America 2026
• Military Times 2025 Best for Vets Employers
• Forbes® 2026 America's Best Large Employers
• Forbes® 2025 America's Best Employers for New Grads
• Forbes® 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
• Military.com Top Military Spouse Employers 2025
• 2026 Handshake Early Talent Award
• Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026

From Fortune Magazine. © 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [e-mail] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.