Senior Cyber Threat Intelligence Lead

Northrop Grumman Corp.; New York (NY); On-site; USD 118,000 - 194,000; Full time

Benefits offered by this job

Flexible work arrangements

401k matching

Excellent benefits

Job summary

Northrop Grumman is seeking a Senior Principal Cyber Threat Analyst to support its I&R team within the CIDO. The role focuses on counterintelligence and cyber threat protection for NGNM networks, with frequent collaboration across security and CI professionals.

A TS/SCI clearance and strong scripting abilities are required. The position involves analytical triage of cyber events, data-driven threat hunts, and reporting to senior leadership while traveling up to 10% of the time.

Qualifications

• 8+ years of relevant experience with a Bachelor's in Science; or 6+ with a Masters; or 4+ with a PhD.
• Current U.S. Government Top Secret clearance, SCI access, and a recent polygraph.
• Experience with log data analysis for intrusion analysis or cybersecurity operations.
• Minimum 4 years of experience with Python, Perl, or other scripting languages.
• Experience with endpoint detection and response technologies and SIEM tools.

Responsibilities

• Analytical triage and prioritization of concurrent cyber events with log data correlation.
• Develop customized scripts to automate analysis and generate detailed writeups.
• Brief findings to technical and non-technical senior management audiences.
• Collaborate daily with I&R team and CI analysts to counter adversary actions.

Skills

Python

PowerShell

Bash

Log analysis

Threat analysis

Education

Bachelor's degree

Tools

SIEM

EDR

PCAP analysis

Job description

Northrop Grumman is seeking a Senior Principal Cyber Threat Analyst to support its I&R team within the CIDO. The role focuses on counterintelligence and cyber threat protection for NGNM networks, with frequent collaboration across security and CI professionals.

A TS/SCI clearance and strong scripting abilities are required. The position involves analytical triage of cyber events, data-driven threat hunts, and reporting to senior leadership while traveling up to 10% of the time.