Advanced knowledge of Windows and non-Windows operating systems
Expertise in evaluating large data sets for abnormalities
Extensive experience in cybersecurity and IT security
Strong understanding of security architectures and network topology
Proficient in developing custom content queries
Skilled in using security event correlation tools like Splunk or ELK
Exceptional communication skills for diverse audiences
Advanced analytical and problem-solving abilities
Responsibilities
Maintain expert knowledge of advanced persistent threat tactics and incident response practices
Identify and hunt for unknown threat activity across various platforms
Lead development of test plans for adversary emulation
Conduct threat hunts using advanced analytic techniques
Analyze network and endpoint events to determine impact
Examine log files and forensic evidence for intrusion detection
Drive the creation of non-standard analytic queries for cyber defense tools
Provide cybersecurity recommendations to leadership
Benefits
Comprehensive health insurance options
Retirement savings plan with employer match
Generous paid time off and holidays
Professional development opportunities
Flexible work hours
Collaborative work environment
Employee assistance programs
Full Job Description
Job Description
Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.
The Cybersecurity Operations Center is looking for a driven professional to help advance the program's strategic vision. You will also have the opportunity to work closely with the Focused Operations manager and lead the collaboration with other Information Security teams for control validation and threat hunt operations.
Responsibilities
Maintain expert knowledge of advanced persistent threat tactics, techniques, and procedures (TTPs) as well as forensics and incident response practices for Windows and non-Windows platform environments
Identify and hunt for unknown threat activity across Windows and non-Windows platform environments requiring non-standard analytics
Lead development of requirements for test plans to perform adversary emulation in support of threat hunt development
Conduct threat hunts using advanced analytic techniques (e.g., event reconstruction), following the lifecycle of suspicious processes and extracting custom data points for holistic reporting/findings
Conduct advanced analysis of network and endpoint events from various sources within the enterprise and determine impact of such events
Conduct advanced analysis of log files, forensic evidence, and other information to determine best methods for detection of an intrusion at the endpoint level
Drive the construction of non-standard analytic queries, which can be implemented on cyber defense tools, in response to new or observed threats within the Windows and non-Windows enclave
Drive process maturation to perform event correlation within the enterprise to identify security architecture and logging gaps
Conduct advanced examination of network topologies to understand how data flows through the network
Provide cybersecurity recommendations to leadership based on significant threats and vulnerabilities
Aid leadership in maturation of standards, taxonomy, and processes for threat hunt
Perform other duties as assigned
Qualifications
Advanced knowledge of Windows and non-Windows operating system concepts and fundamentals
Advanced skill in evaluating large data sets (endpoint and network events) for abnormalities (i.e., baseline analysis)
Advanced experience in cybersecurity and/or information technology (IT) security
Advanced knowledge of security architectures, firewalls, proxies, and network topology
Advanced skill in developing and deploying custom content queries
Advanced skill in using security event correlation tools (e.g., Splunk, ELK)
Advanced skill in hunting host and network-based intrusions via intrusion detection technologies
Outstanding communication skills for reporting complex technical situations to various audiences, including executive leadership and nontechnical staff.
Advanced research, analytical, and problem-solving skills
Advanced skill working with all levels of management, supervisors, stakeholders and vendors
Expert skill in collaborating with other teams on time-sensitive incidents
Desired Qualifications
Advanced skill in identifying gaps in technical capabilities
Advanced skill in relevant programming languages (e.g., C++, Python, etc.)
Advanced skill in testing and evaluating tools for implementation
Advanced experience with security tools related to enterprise log management, IDP/IDS, antivirus, firewalls, proxies, DLP, forensic analysis and SIEM
CISSP, CISA, CCSP or other related Information Security certifications
Advanced knowledge of IT security standards and frameworks (e.g., MITRE ATT&CK)
Advanced skill in analyzing audit log events for cloud technologies to facilitate development of cyber defense detections
Additional Information
Hours:
Monday - Friday, 8:00AM - 4:30 PM
Locations:
820 Follin Lane, Vienna, VA 22180
5550 Heritage Oaks Drive, Pensacola, FL 32526
141 Security Dr. Winchester, VA 22602
About Navy Federal Credit Union
Navy Federal Credit Union is a credit union that serves members of the military and their families. The credit union offers a range of financial products and services, including checking and savings accounts, loans, and credit cards. Navy Federal Credit Union was founded in 1933 and is headquartered in Vienna, Virginia. The credit union has more than 9 million members and operates more than 300 branches across the United States and around the world.
