Senior Cyber Threat Intelligence Lead

Northrop Grumman; United States; On-site; USD 118,000 - 194,000; Full time

Benefits offered by this job

401(k) matching

Healthcare benefits

Job summary

Northrop Grumman is seeking a Senior Principal Cyber Threat Analyst to support its I&R team. The role will involve counterintelligence and threat protection for networks and data, with collaboration across the team to mitigate adversary actions.

The candidate must bring deep analytic capability and strong communication to leadership. The position requires current Top Secret clearance with SCI access and a recent polygraph, plus proven experience in log data analysis, scripting, and CI/IR

Qualifications

• Bachelor's degree in Science; 8 years experience OR 6 years with MS; OR 4 years with PhD.
• Current Top Secret security clearance with SCI access and recent polygraph.
• Experience analyzing log data for intrusion/cyber operations.
• Experience with two or more analysis tools in a CIRT or similar environment.
• 4+ years of experience with Python, Perl or other scripting languages.

Responsibilities

• Analytical triage of concurrent cyber events and prioritization of alerts.
• Host and network log analysis; correlate indicators and PCAP data.
• Create event timelines and perform root cause analysis.
• Develop customized scripts to aid analysis and automate tasks.
• Brief findings to technical and non-technical leadership.

Skills

Cyber threat analysis

Scripting (Python, Perl)

Log analysis

Strong communication

Education

Bachelor's degree in Science

Master's degree

PhD

Tools

SIEM tools

Network analysis tools

Linux/Unix

Job description

Northrop Grumman is seeking a Senior Principal Cyber Threat Analyst to support its I&R team. The role will involve counterintelligence and threat protection for networks and data, with collaboration across the team to mitigate adversary actions.

The candidate must bring deep analytic capability and strong communication to leadership. The position requires current Top Secret clearance with SCI access and a recent polygraph, plus proven experience in log data analysis, scripting, and CI/IR