Senior Cyber Threat Analyst: Threat Detection & Forensics

0090 CORP-Corporate Office; United States; On-site; USD 94,000 - 141,000; Full time

Benefits offered by this job

9/80 work schedule

401k matching

Health insurance

Flexible work arrangements

Job summary

Northrop Grumman in the United States is seeking a seasoned cybersecurity analyst to perform analytical triage of cyber events, analyze logs, and conduct intrusion analysis. You will prepare detailed writeups and briefings for diverse audiences, evaluating threats and reporting on TTPs.

The role requires TS clearance, 2+ years in log-data analysis, and 4+ years with Python/PowerShell or similar scripting languages; travel up to 10% may be required, with a strong emphasis on teamwork across large

Qualifications

• 5 Years of relevant experience with a Bachelors in Science; OR 3 Years with Masters; OR 1 Year with PhD.
• Candidates must have the ability to obtain, and maintain, a U.S. Government Top Secret level security clearance as a condition of continued employment.
• Must have a minimum of 2 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations.
• Must have a minimum of 4 years of experience with Python, PowerShell or other scripting language.

Responsibilities

• Make use of commercial and custom applications/systems/tools to perform analytical triage of cyber events, host and network-based log analysis, correlation of network indicators and PCAP data, forensic analysis of system images, event timeline generation, and root cause analysis.
• Prepare detailed written analyses of events and perform briefings of findings to both technical and non-technical audiences.
• Conduct all-source research on cyber threat actors and intrusion sets (e.g., APTs); evaluate technical and intelligence reporting for cyber threat activities of interest.
• Support informational and analytic products designed to increase situational awareness and advanced warning of current and emerging cyber threats and risks; report on underlying patterns of behavior by conducting detailed analysis of incidents, threats and risks and associated impacts and consequences, vulnerabilities, tactics, techniques, and procedures (TTP), and other malicious and non-malicious indicators.

Skills

Python

PowerShell

Log analysis

Scripting

Education

Bachelor's in Science

Master's

PhD

Tools

SOC/CIRT tools

Forensic tools

Job description

Northrop Grumman in the United States is seeking a seasoned cybersecurity analyst to perform analytical triage of cyber events, analyze logs, and conduct intrusion analysis. You will prepare detailed writeups and briefings for diverse audiences, evaluating threats and reporting on TTPs.

The role requires TS clearance, 2+ years in log-data analysis, and 4+ years with Python/PowerShell or similar scripting languages; travel up to 10% may be required, with a strong emphasis on teamwork across large