Principal Cyber Security Analyst

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

At Navy Federal, we are passionate about our members--they are our mission. We're looking for a talented, experienced information security professional to join our growing Cybersecurity Operations team as a senior threat analyst.   

The Cybersecurity Operations Center is looking for a driven professional to help advance the program's strategic vision.  You will also have the opportunity to work closely with the Focused Operations manager and lead the collaboration with other Information Security teams for control validation and threat hunt operations.

• Maintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs) as well as forensics and incident response practices for Windows and non-Windows platform environments
• Identify and hunt for unknown threat activity across Windows and non-Windows platform environments requiring non-standard analytics
• Lead development of requirements for test plans to perform adversary emulation in support of threat hunt development
• Conduct threat hunts using advanced analytic techniques (e.g., event reconstruction), following the lifecycle of suspicious processes and extracting custom data points for holistic reporting/findings
• Conduct advanced analysis of network and endpoint events from various sources within the enterprise and determine impact of such events
• Conduct advanced analysis of log files, forensic evidence, and other information to determine best methods for detection of an intrusion at the endpoint level
• Drive the construction of non-standard analytic queries, which can be implemented on cyber defense tools, in response to new or observed threats within the Windows and non-Windows enclave
• Drive process maturation to perform event correlation within the enterprise to identify security architecture and logging gaps
• Conduct advanced examination of network topologies to understand how data flows through the network
• Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities
• Aid leadership in maturation of standards, taxonomy, and processes for threat hunt
• Perform other duties as assigned

• Advanced knowledge of Windows and non-Windows operating system concepts and fundamentals
• Advanced skill in evaluating large data sets (endpoint and network events) for abnormalities (i.e., baseline analysis)
• Advanced experience in cybersecurity and/or information technology (IT) security 
• Advanced knowledge of security architectures, firewalls, proxies, and network topology 
• Advanced skill in developing and deploying custom content queries
• Advanced skill in using security event correlation tools (e.g., Splunk, ELK)
• Advanced skill in hunting host and network-based intrusions via intrusion detection technologies 
• Outstanding communication skills for reporting complex technical situations to various audiences, including executive leadership and nontechnical staff.
• Advanced research, analytical, and problem-solving skills
• Advanced skill working with all levels of management, supervisors, stakeholders and vendors
• Expert skill in collaborating with other teams on time-sensitive incidents

Desired Qualifications

• Advanced skill in identifying gaps in technical capabilities
• Advanced skill in relevant programming languages (e.g., C++, Python, etc.)
• Advanced skill in testing and evaluating tools for implementation
• Advanced experience with security tools related to enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic analysis and SIEM
• CISSP, CISA, CCSP or other related Information Security certifications 
• Advanced knowledge of IT security standards and frameworks (e.g., MITRE ATT&CK)
• Advanced skill in analyzing audit log events for cloud technologies to facilitate development of cyber defense detections

Additional Information

Hours: 

• Monday - Friday, 8:00AM - 4:30 PM
   

Locations: 

• 820 Follin Lane, Vienna, VA 22180
• 5550 Heritage Oaks Drive, Pensacola, FL 32526
• 141 Security Dr. Winchester, VA 22602