
location_on429, O Street Northwest, Logan Circle/Shaw, Ward 2, Washington, District of Columbia, 20001, United States
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history—from the first flight across the Atlantic Ocean to stealth bombers and landing on the moon. We look for people who have bold new ideas, courage, and a pioneering spirit to join forces to invent the future.
Our culture thrives on intellectual curiosity, cognitive diversity, and bringing your whole self to work. We have an insatiable drive to do what others think is impossible. Our employees are not only part of history; they're making history. At the heart of "Defining Possible" is our commitment to missions. In rapidly changing global security environments, Northrop Grumman brings informed insights and secure technological solutions to enable strategic objectives.
Northrop Grumman's Corporate Sector's Chief Information & Digital Office (CIDO) is seeking a Senior Principal Cyber Intelligence Analyst to support its CISO & Global Cybersecurity organization's Intelligence and Response (I&R) team. The selected candidate will be tasked with a unique cyber mission to provide counterintelligence (CI) and cyber threat protection to Northrop Grumman's intellectual property, networks, and sensitive data against a variety of highly skilled adversaries.
To accomplish this goal, the I&R team performs daily in-depth analysis of current network and host-based threat activity, assesses trends developing in the future, monitors CI portals, and liaises with Defense Industrial Base and government peers to enhance the protection of the Northrop Grumman Managed Network (NGMN). We are looking for an experienced and highly motivated problem solver to act as a senior-level cyber threat analyst to process and mitigate threat activity as part of a high-performing, high-profile team of cybersecurity and CI professionals.
You will collaborate daily with various I&R team members and Strategic CI analysts to coordinate a multi-tiered approach to threat mitigation, resulting in the denial of current and future adversary actions. Adaptability, creativity, a commitment to mission, self-direction, and strong written and verbal communication skills are essential. By joining in our shared mission, we will support yours by expanding your personal network and developing skills, whether you are new to the field or an industry thought leader.
The application period for this job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.
Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. We consider qualified applicants regardless of background.
Work model: On-site
429, O Street Northwest, Logan Circle/Shaw, Ward 2, Washington, District of Columbia, 20001, United States
Washington, District of Columbia
Demonstrated awareness of current endpoint and network exploits, familiarity with computer network exploitation methodologies and tools. Understanding of network communication protocols at all layers of the OSI model. Experience working with large data sets, high-performance computing systems, and artificial intelligence (AI) tools. Experience working with endpoint detection and response technologies. Experience with cyber threat intelligence methodologies. Linux/Unix and Windows proficiency, including shell (Bash, PowerShell) scripting. Familiarity with current information security threats facing U.S. defense contractors or the U.S. Government. One or more of the following technical certifications (or equivalent): GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), Certified Forensic Computer Examiner (CFCE). Other vendor certifications considered (e.g., EnCE, ACE, CCNA, CISSP, etc.).
Skills: Python, Perl, Linux, Unix, Windows, Bash, Powershell, Artificial Intelligence, Cyber Threat Intelligence, Top Secret.
Education: Bachelor's in Science required with 8 years experience; Master's degree required with 6 years experience; PhD required with 4 years experience.