Senior Principal Cyber Threat Analyst

Northrop Grumman

. Provide counterintelligence and cyber threat protection for Northrop Grumman intellectual property, networks, and sensitive data .

Posted 9/24/2026full-timeRemote • Maryland • United StatesSenior💰 $117,500 - $193,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber threat protection, analysis of network and host-based threat activity, and the ability to utilize scripting languages for customized analysis. Proficient in collaborating with cross-functional teams to enhance cybersecurity measures and mitigate threats effectively.

Highest-signal resume keywords

Cyber Threat Intelligence MethodologiesPython ScriptingLog Data AnalysisEndpoint Detection and Response TechnologiesTop Secret Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity OperationsNetwork Communication ProtocolsData AnalysisRoot Cause AnalysisCustomized ScriptingHigh-Performance Computing SystemsArtificial Intelligence ToolsNetwork Indicators CorrelationPCAP Data AnalysisIntrusion Analysis

Soft Skills

CollaborationCommunicationAnalytical ThinkingProblem Solving

Tools & Technologies

CIRT Analysis ToolsLinux/UnixWindowsBash ScriptingPowerShell Scripting

Certifications & Qualifications

GCEDGCIHGCIAGCFAGREMCFCEEnCEACECCNACISSP

Industry Keywords

CounterintelligenceDefense Industrial BaseCyber Threat ProtectionInformation Security ThreatsU.S. Government Compliance

Tech Stack

Tools & technologies

Cyber SecurityLinuxPerlPythonUnix

About the role

Key responsibilities & impact

Provide counterintelligence and cyber threat protection for Northrop Grumman intellectual property, networks, and sensitive data
Perform daily in-depth analysis of current network- and host-based threat activity
Assess developing future threat trends
Monitor counterintelligence portals
Liaise with Defense Industrial Base and government peers
Enhance protection of the Northrop Grumman Managed Network
Process and mitigate cyber threat activity as part of the Intelligence and Response team
Collaborate with I&R team members and Strategic CI analysts on multi-tiered threat mitigation
Identify and counter sophisticated cybersecurity and cyber threats across the managed network
Triage and prioritize concurrent cyber events
Analyze host and network logs
Correlate network indicators and PCAP data
Generate event timelines and perform root cause analysis
Independently create customized scripts to facilitate analysis
Prepare detailed written event analyses
Brief findings to technical and non-technical senior management audiences

Requirements

What you’ll need

8 Years of relevant experience with a Bachelors in Science; OR 6 Years with Masters; OR 4 Years with PhD
Current U.S. Government Top Secret level security clearance, including SCI access and a recent Polygraph adjudicated within the last 5 years
Ability to prepare and analyze data and figures
Experience with two or more analysis tools used in a CIRT or similar investigative environment
Minimum of 4 years of experience conducting analysis of log data in support of intrusion analysis or cybersecurity operations
Minimum of 4 years of experience with Python, Perl or other scripting language
Demonstrated awareness of current endpoint and network exploits
Familiarity with computer network exploitation methodologies and tools
Understanding of network communication protocols at all layers of the OSI model
Experience working with large data sets, high-performance computing systems, and artificial intelligence (AI) tools
Experience working with endpoint detection and response technologies
Experience with cyber threat intelligence methodologies
Linux/Unix and Windows proficiency, including shell (Bash, PowerShell) scripting
Familiarity with current information security threats facing U.S. defense contractors or the U.S. Government
One or more preferred technical certifications or equivalent, including GCED, GCIH, GCIA, GCFA, GREM, or CFCE
Other vendor certifications considered, such as EnCE, ACE, CCNA, or CISSP
U.S. Citizenship is required for positions with a government clearance

Benefits

Comp & perks

Flexible work arrangements
Phenomenal learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
401k matching program
Possible overtime
Possible shift differential
Discretionary bonus eligibility