Remote Principal Cyber Threat Analyst – High-Impact Defense

Praxy; Northern (KY); Remote; USD 94,000 - 141,000; Full time

Benefits offered by this job

9/80 schedule

401k match

Healthcare benefits

Job summary

Northrop Grumman is seeking a Principal Cyber Threat Analyst to join the I&R team, supporting the CISO and security operations. The role requires deep cyber threat analysis, log and network data review, and coordination with defense industrial base partners.

The ideal candidate will have TS clearance eligibility, hands-on experience in SOC/CIRT environments, and strong scripting skills (Python/PowerShell). Remote US work is possible with travel up to 10%.

Qualifications

• 5 years of relevant experience with a Bachelor's in Science; OR 3 years with Masters; OR 1 year with PhD.
• Ability to obtain and maintain a U.S. Government Top Secret clearance.
• Experience with two or more analysis tools used in a SOC/CIRT or similar investigative environment.
• Minimum 2 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations.
• Minimum 4 years of experience with Python, PowerShell or other scripting language.

Responsibilities

• Make use of commercial and custom applications/systems/tools to perform analytical triage of cyber events, host and network-based log analysis, correlation of network indicators and PCAP data, forensic analysis of system images, event timeline generation, and root cause analysis.
• Prepare detailed written analyses of events and perform briefings of findings to both technical and non-technical audiences.
• Conduct all-source research on cyber threat actors and intrusion sets; evaluate technical and intelligence reporting for cyber threat activities of interest.
• Support informational and analytic products designed to increase situational awareness and advanced warning of current and emerging cyber threats and risks; report on underlying patterns of behavior by conducting detailed analysis of incidents, threats and risks and associated impacts and consequences, vulnerabilities, tactics, techniques and procedures, and other indicators.

Skills

Python

PowerShell

Data analysis

Education

Bachelor's in Science

Master's in Science

PhD

Tools

SOC/CIRT tools

Log/PCAP analysis

Job description

Northrop Grumman is seeking a Principal Cyber Threat Analyst to join the I&R team, supporting the CISO and security operations. The role requires deep cyber threat analysis, log and network data review, and coordination with defense industrial base partners.

The ideal candidate will have TS clearance eligibility, hands-on experience in SOC/CIRT environments, and strong scripting skills (Python/PowerShell). Remote US work is possible with travel up to 10%.