Senior Cyber Threat Intelligence Analyst

0090 CORP-Corporate Office; EE. UU.; Presencial; USD 94.000 - 141.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

9/80 work schedule

Health insurance

Descripción de la vacante

Northrop Grumman seeks a cybersecurity professional to perform analytical triage of cyber events, log analysis, and root cause assessment. You will prepare written analyses and briefings for technical and non-technical audiences, researching threat actors and intrusion sets to enhance situational awareness.

The role requires a Top Secret clearance, 4+ years with Python/PowerShell, and experience with SOC/CIRT tooling and large data analysis.

Formación

• 5 Years of relevant experience with a Bachelor's in Science; OR 3 Years with Masters; OR 1 Years with PhD.
• Candidates must have the ability to obtain, and maintain, a U.S. Government Top Secret level security clearance as a condition of continued employment.
• Must be able to prepare and analyze data and figures.
• Must have experience with two or more analysis tools used in a SOC/CIRT or similar investigative environment.
• Must have a minimum of 2 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations.
• Must have a minimum of 4 years of experience with Python, PowerShell or other scripting language.

Responsabilidades

• Make use of commercial and custom applications/systems/tools to perform analytical triage of cyber events, host and network-based log analysis, correlation of network indicators and PCAP data, forensic analysis of system images, event timeline generation, and root cause analysis.
• Prepare detailed written analyses of events and perform briefings of findings to both technical and non-technical audiences.
• Conduct all-source research on cyber threat actors and intrusion sets (e.g., APTs); evaluate technical and intelligence reporting for cyber threat activities of interest.
• Support informational and analytic products designed to increase situational awareness and advanced warning of current and emerging cyber threats and risks; report on underlying patterns of behavior by conducting detailed analysis of incidents, threats and risks and associated impacts and consequences, vulnerabilities, tactics, techniques and procedures (TTP), and other malicious and non-malicious indicators.

Conocimientos

Data analysis

Analytical thinking

Briefings to audiences

Educación

Bachelor's in Science

Herramientas

Python

PowerShell

Descripción del empleo

Northrop Grumman seeks a cybersecurity professional to perform analytical triage of cyber events, log analysis, and root cause assessment. You will prepare written analyses and briefings for technical and non-technical audiences, researching threat actors and intrusion sets to enhance situational awareness.

The role requires a Top Secret clearance, 4+ years with Python/PowerShell, and experience with SOC/CIRT tooling and large data analysis.