Principal Cyber Security Analyst

Navy Federal Credit Union; Winchester (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Navy Federal Credit Union is seeking a senior threat analyst for the Cybersecurity Operations Center. The role focuses on advanced threat hunting, analytics, and collaboration with other information security teams to validate controls and drive threat hunt operations.

The ideal candidate will have deep knowledge of Windows and non-Windows environments, experience with large data set analytics, and strong communication skills to report findings to executive leadership.

Qualifications

• Advanced knowledge of Windows and non-Windows OS concepts.
• Advanced skill in evaluating large data sets for abnormalities.
• Advanced experience in cybersecurity and/or IT security.
• Advanced knowledge of security architectures, firewalls, proxies, and network topology.
• Advanced skill in developing and deploying custom content queries.
• Advanced skill in using security event correlation tools (e.g., Splunk, ELK).
• Advanced skill in hunting host and network-based intrusions via IDS technologies.
• Outstanding communication skills for reporting to leadership.

Responsibilities

• Maintain expert knowledge of TTPs, forensics, and incident response for Windows and non-Windows environments.
• Identify and hunt for unknown threat activity across Windows and non-Windows environments.
• Lead requirements for test plans to perform adversary emulation for threat hunts.
• Conduct threat hunts using advanced analytics and event reconstruction.
• Analyze network and endpoint events to determine impact of threats.
• Examine logs and forensic data to detect intrusions at the endpoint.
• Develop non-standard analytic queries for cyber defense tools in response to threats.
• Mature event correlation to identify security gaps in logging and architecture.
• Examine network topologies to map data flows and risk exposure.
• Provide cybersecurity recommendations to leadership on threats and vulnerabilities.
• Assist leadership in maturing standards, taxonomy, and threat hunt processes.
• Perform other duties as assigned

Skills

OS concepts (Windows & non-Windows)

Large data set analysis

Cybersecurity / IT security

Security architectures & network topol

Custom content queries

Security event correlation tools (Splq

Intrusion detection technologies

Executive communication

Analytical problem solving

Cross-team collaboration

Tools

Splunk

ELK

Job description

Overview

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

At Navy Federal, we are passionate about our members--they are our mission. We're looking for a talented, experienced information security professional to join our growing Cybersecurity Operations team as a senior threat analyst.

The Cybersecurity Operations Center is looking for a driven professional to help advance the program's strategic vision. You will also have the opportunity to work closely with the Focused Operations manager and lead the collaboration with other Information Security teams for control validation and threat hunt operations.

Responsibilities

• Maintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs) as well as forensics and incident response practices for Windows and non-Windows platform environments


• Identify and hunt for unknown threat activity across Windows and non-Windows platform environments requiring non-standard analytics


• Lead development of requirements for test plans to perform adversary emulation in support of threat hunt development


• Conduct threat hunts using advanced analytic techniques (e.g., event reconstruction), following the lifecycle of suspicious processes and extracting custom data points for holistic reporting/findings


• Conduct advanced analysis of network and endpoint events from various sources within the enterprise and determine impact of such events


• Conduct advanced analysis of log files, forensic evidence, and other information to determine best methods for detection of an intrusion at the endpoint level


• Drive the construction of non-standard analytic queries, which can be implemented on cyber defense tools, in response to new or observed threats within the Windows and non-Windows enclave


• Drive process maturation to perform event correlation within the enterprise to identify security architecture and logging gaps


• Conduct advanced examination of network topologies to understand how data flows through the network


• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities


• Aid leadership in maturation of standards, taxonomy, and processes for threat hunt


• Perform other duties as assigned

Qualifications

• Advanced knowledge of Windows and non-Windows operating system concepts and fundamentals


• Advanced skill in evaluating large data sets (endpoint and network events) for abnormalities (i.e., baseline analysis)


• Advanced experience in cybersecurity and/or information technology (IT) security


• Advanced knowledge of security architectures, firewalls, proxies, and network topology


• Advanced skill in developing and deploying custom content queries


• Advanced skill in using security event correlation tools (e.g., Splunk, ELK)


• Advanced skill in hunting host and network-based intrusions via intrusion detection technologies


• Outstanding communication skills for reporting complex technical situations to various audiences, including executive leadership and nontechnical staff.


• Advanced research, analytical, and problem-solving skills


• Advanced skill working with all levels of management, supervisors, stakeholders and vendors


• Expert skill in collaborating with other teams on time-sensitive incidents

Desired Qualifications

• Advanced skill in identifying gaps in technical capabilities


• Advanced skill in relevant programming languages (e.g., C++, Python, etc.)


• Advanced skill in testing and evaluating tools for implementation


• Advanced experience with security tools related to enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic analysis and SIEM


• CISSP, CISA, CCSP or other related Information Security certifications


• Advanced knowledge of IT security standards and frameworks (e.g., MITRE ATT&CK)


• Advanced skill in analyzing audit log events for cloud technologies to facilitate development of cyber defense detections

Hours

• Monday - Friday, 8:00AM - 4:30 PM

Locations

• 820 Follin Lane, Vienna, VA 22180


• 5550 Heritage Oaks Drive, Pensacola, FL 32526


• 141 Security Dr. Winchester, VA 22602

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks. Our approach to careers is simple yet powerful: Make our mission your passion.* FORTUNE 100 Best Companies to Work For 2026* Yello and WayUp Top 100 Internship Programs 2025* Computerworld Best Places to Work in IT 2026* Most Loved Workplace - America's Top Most Loved Workplaces 2025* 2025 PEOPLE Companies That Care* Newsweek Most Trustworthy Companies in America 2026* Military Times 2025 Best for Vets Employers* Forbes 2026 America's Best Large Employers* Forbes 2025 America's Best Employers for New Grads* Forbes 2025 America's Best Employers for Tech Workers* 2025 RippleMatch Campus Forward Award Winner for Overall Excellence* Military.com Top Military Spouse Employers 2025* 2026 Handshake Early Talent Award* Newsweek America's Greatest Workplaces for Culture, Belonging and Community 2026 From Fortune Magazine. 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [e-mail] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.

Disclaimers

Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.

Protect Yourself from Job Scams

Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details, or personal financial information during the hiring process.

Bank Secrecy Act

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.