Senior Cyber Threat Intelligence Analyst - TS/SCI w Poly

Northrop Grumman; Maryland; Hybrid; USD 104,000 - 155,000; Full time

Benefits offered by this job

Health insurance

Life insurance

Disability insurance

Savings plan

Paid holidays

PTO

Flexible work arrangements

Job summary

Northrop Grumman is seeking a Principal Cyber Intelligence Analyst to join our Cybersecurity Operations Center. The role requires a current U.S. Government Top Secret clearance with SCI access and a recent polygraph, and offers opportunities to advance capabilities in threat detection, automation, and defense.

The position emphasizes monitoring, tool development, and cross-team collaboration in a dynamic security environment with travel possible and overtime per program needs.

Qualifications

• 8 years of relevant experience with an associate degree or equivalent, 5 years with a bachelor’s, 3 with a master’s, 1 with a PhD.
• Current U.S. Government Top Secret clearance with SCI access and a recent polygraph.
• Fluency in offensive TTPs.
• Strong defensive cyber operations foundation in a team setting.
• Blue Team mindset: incident triage, threat hunting, alert handling.
• Dev/Sec/Ops competency: write code, optimize SIEM queries, engineer integrations.
• Experience with Windows, Linux, Networking, AWS, and Azure.
• Ability to work in office, SCIF, and home as needed.

Responsibilities

• Monitor, investigate, and respond to cyber threat alerts on networks.
• Create and tune cyber threat detection rules in platforms.
• Conceptualize, build and integrate tools to improve defensive operations.
• Collaborate with cyber, technical, and non-technical teams on incident response.

Skills

Threat hunting

Incident response

Dev/Sec/Ops

SIEM optimization

Windows

Linux

Cross-functional collaboration

Adaptive communication

Education

Associates in Computer Science or related field

Bachelor's degree

Master's degree

PhD

Tools

Windows

Linux

AWS

Azure

SIEM

Threat intel tools

Job description

Northrop Grumman is seeking a Principal Cyber Intelligence Analyst to join our Cybersecurity Operations Center. The role requires a current U.S. Government Top Secret clearance with SCI access and a recent polygraph, and offers opportunities to advance capabilities in threat detection, automation, and defense.

The position emphasizes monitoring, tool development, and cross-team collaboration in a dynamic security environment with travel possible and overtime per program needs.