Senior Cyber Threat Intelligence Analyst & Automation Lead

0090 CORP-Corporate Office; United States; Hybrid; USD 104,000 - 155,000; Full time

Benefits offered by this job

Health insurance

401k matching

Paid time off

Job summary

Northrop Grumman seeks a Principal Cyber Intelligence Analyst to support our Cybersecurity Operations Center. You will monitor and respond to threats, build detection rules, and engineer cyber tools across Windows, Linux, AWS and Azure environments.

You will collaborate with technical and non-technical teams in flexible office, SCIF, and home settings, and you must hold a current Top Secret/SCI clearance with a recent polygraph.

Qualifications

• 8+ years of relevant experience with an Associates in CS/CE/Cybersecurity or related field; 5+ years with a Bachelor's; 3+ years with a Master's; 1+ year with a PhD.
• Candidate must hold a current U.S. Government Top Secret security clearance with SCI access and a recent Polygraph adjudicated within 5 years.
• Strong offensive TTPs knowledge, defensive cyber operations experience, and Dev/Sec/Ops competency including coding and SIEM tooling.

Responsibilities

• Monitor, investigate, and respond to cyber threat alerts on unclassified and classified networks.
• Create and tune cyber threat detection rules in various platforms.
• Conceptualize, build and integrate tools to improve defensive cyber operations.
• Collaborate with cross-functional teams on incident response and DevSecOps in various environments.

Skills

Top Secret clearance

TTPs (offensive)

Defensive cyber operations

Dev/Sec/Ops

Windows

Linux

AWS

Azure

Python

SIEM

EDR

IDS/IPS

SOAR

Education

Associates in Computer Science/Engineering/Cybersecurity/related

Bachelor's degree

Master's degree

PhD

Tools

SIEM platforms

Yara rules

EDR tooling

IDS/IPS rules

Job description

Northrop Grumman seeks a Principal Cyber Intelligence Analyst to support our Cybersecurity Operations Center. You will monitor and respond to threats, build detection rules, and engineer cyber tools across Windows, Linux, AWS and Azure environments.

You will collaborate with technical and non-technical teams in flexible office, SCIF, and home settings, and you must hold a current Top Secret/SCI clearance with a recent polygraph.