Principal Cyber Security Analyst

Senior Threat AnalystNavy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.At Navy Federal, we are passionate about our members--they are our mission. We're looking for a talented, experienced information security professional to join our growing Cybersecurity Operations team as a senior threat analyst.The Cybersecurity Operations Center is looking for a driven professional to help advance the program's strategic vision.

You will also have the opportunity to work closely with the Focused Operations manager and lead the collaboration with other Information Security teams for control validation and threat hunt operations.ResponsibilitiesMaintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs) as well as forensics and incident response practices for Windows and non-Windows platform environmentsIdentify and hunt for unknown threat activity across Windows and non-Windows platform environments requiring non-standard analyticsLead development of requirements for test plans to perform adversary emulation in support of threat hunt developmentConduct threat hunts using advanced analytic techniques (e.g., event reconstruction), following the lifecycle of suspicious processes and extracting custom data points for holistic reporting/findingsConduct advanced analysis of network and endpoint events from various sources within the enterprise and determine impact of such eventsConduct advanced analysis of log files, forensic evidence, and other information to determine best methods for detection of an intrusion at the endpoint levelDrive the construction of non-standard analytic queries, which can be implemented on cyber defense tools, in response to new or observed threats within the Windows and non-Windows enclaveDrive process maturation to perform event correlation within the enterprise to identify security architecture and logging gapsConduct advanced examination of network topologies to understand how data flows through the networkProvide cybersecurity recommendations to leadership based on significant threats and vulnerabilitiesAid leadership in maturation of standards, taxonomy, and processes for threat huntPerform other duties as assignedQualificationsAdvanced knowledge of Windows and non-Windows operating system concepts and fundamentalsAdvanced skill in evaluating large data sets (endpoint and network events) for abnormalities (i.e., baseline analysis)Advanced experience in cybersecurity and/or information technology (IT) securityAdvanced knowledge of security architectures, firewalls, proxies, and network topologyAdvanced skill in developing and deploying custom content queriesAdvanced skill in using security event correlation tools (e.g., Splunk, ELK)Advanced skill in hunting host and network-based intrusions via intrusion detection technologiesOutstanding communication skills for reporting complex technical situations to various audiences, including executive leadership and nontechnical staff.Advanced research, analytical, and problem-solving skillsAdvanced skill working with all levels of management, supervisors, stakeholders and vendorsExpert skill in collaborating with other teams on time-sensitive incidentsDesired QualificationsAdvanced skill in identifying gaps in technical capabilitiesAdvanced skill in relevant programming languages (e.g., C++, Python, etc.)Advanced skill in testing and evaluating tools for implementationAdvanced experience with security tools related to enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic analysis and SIEMCISSP, CISA, CCSP or other related Information Security certificationsAdvanced knowledge of IT security standards and frameworks (e.g., MITRE ATT&CK)Advanced skill in analyzing audit log events for cloud technologies to facilitate development of cyber defense detectionsAdditional InformationHours:Monday - Friday, 8:00AM - 4:30 PMLocations:820 Follin Lane, Vienna, VA Heritage Oaks Drive, Pensacola, FL Security Dr. Winchester, VA 22602