Senior Cyber Threat Analyst - Remote

Fanan Limited; United States; Remote; USD 94,000 - 141,000; Full time

Job summary

Northrop Grumman is seeking a Principal Cyber Threat Analyst to join the Intelligence and Response team, supporting the Corporate Sector CIDO. The role emphasizes threat analysis, log triage, and collaboration with engineers and analysts to counter sophisticated cyber threats.

The position requires Top Secret clearance and offers flexible work arrangements, learning opportunities, and a broad portfolio of defense-grade projects.

Qualifications

• 5+ years of relevant experience with a Bachelors in Science; OR 3 Years with Masters; OR 1 Years with PhD.
• Candidates must have the ability to obtain, and maintain, a U.S. Government Top Secret level security clearance as a condition of continued employment.
• Must be able to prepare and analyze data and figures.
• Must have experience with two or more analysis tools used in a SOC/CIRT or similar investigative environment.
• Must have a minimum of 2 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations.
• Must have a minimum of 4 years of experience with Python, PowerShell or other scripting language.

Responsibilities

• Make use of commercial and custom applications/systems/tools to perform analytical triage of cyber events, host and network-based log analysis, correlation of network indicators and PCAP data, forensic analysis of system images, event timeline generation, and root cause analysis.
• Prepare detailed written analyses of events and perform briefings of findings to both technical and non-technical audiences.
• Conduct all-source research on cyber threat actors and intrusion sets (e.g., APTs); evaluate technical and intelligence reporting for cyber threat activities of interest.
• Support informational and analytic products designed to increase situational awareness and advanced warning of current and emerging cyber threats and risks; report on underlying patterns of behavior by conducting detailed analysis of incidents, threats and risks and associated impacts and consequences, vulnerabilities, tactics, techniques and procedures (TTP), and other malicious and non-malicious indicators.

Skills

Python

PowerShell

Log analysis

SOC/CIRT experience

Education

BS in Science

MS in Science

PhD

Tools

SIEM tools

Forensic tools

Job description

Northrop Grumman is seeking a Principal Cyber Threat Analyst to join the Intelligence and Response team, supporting the Corporate Sector CIDO. The role emphasizes threat analysis, log triage, and collaboration with engineers and analysts to counter sophisticated cyber threats.

The position requires Top Secret clearance and offers flexible work arrangements, learning opportunities, and a broad portfolio of defense-grade projects.