Cyber Threat Analyst

Are you interested in joining a next-level cyber defense team that operates in an inclusive and fulfilling work environment?

If so, join us at APL!

We are seeking a cybersecurity specialist to identify and root out sophisticated threat actors in an actively evolving threat landscape. On our Defensive Cyber Operations (DCO) team, you will contribute to incident investigations, detection development, and capability improvement in a group that fosters growth and collaboration. We strive to be considered "best-in-class" in cybersecurity, so we need analysts who are passionate about excelling in their field! This role bridges traditional defense monitoring and data analytics to identify novel attacker behaviors. Ideal candidates will combine curiosity, data fluency, and familiarity with adversary tradecraft to continuously evolve our detection and response ecosystem.

As a Cyber Threat Analyst you will...

• Correlate log sources, device telemetry, and security tool data to hunt for APT actor activity and investigate indications of compromise.
• Build detection and prevention controls based on threat reporting and observed activity.
• Investigate incidents by identifying compromise activity through analysis of device images, artifacts, logs, and network traffic.
• Support efforts focused on detection, capability, and procedure refinement.
• Develop your skills through training, practice, and studying current cyber trends.

Minimum Qualifications

• Bachelor's Degree in Information Security, Computer Science, a related field, or equivalent experience that matches the required knowledge, skill and abilities.
• 3-5 years of real-world cyber and/or data science experience involving anomaly detection using EDRs, packet captures, malware analysis sandboxes, SIEM/SOAR toolsets, and scripting languages (e.g. Python, PowerShell, SQL).
• Flexibility to work occasional evenings and weekends for on-call shifts and incident response events.
• Are able to obtain Secret level security clearance. If selected, you will be subject to a government security clearance investigation and must meet the requirements for access to classified information. Eligibility requirements include U.S. citizenship.

Desired Qualifications

• A Master's Degree in Computer Science, Information Security Assurance, or related field.
• Experience with Assume Breach methodologies and investigating sophisticated attacker tradecraft in complex environments.
• Experience with statistical analysis, data science techniques, using LLMs, or using agentic systems to identify outliers and to enhance DCO capabilities.

Why Work at APL?

The Johns Hopkins University Applied Physics Laboratory (APL) brings world-class expertise to our nation's most critical defense, security, space and science challenges. While we are dedicated to solving complex challenges and pioneering new technologies, what makes us truly outstanding is our culture. We offer a vibrant, welcoming atmosphere where you can bring your authentic self to work, continue to grow, and build strong connections with inspiring teammates.

At APL, we celebrate our differences of perspectives and encourage creativity and bold, new ideas. Our employees enjoy generous benefits, including a robust education assistance program, unparalleled retirement contributions, and a healthy work/life balance. APL's campus is located in the Baltimore-Washington metro area. Learn more about our career opportunities athttp://www.jhuapl.edu/careers.

All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender identity or expression, sexual orientation, national origin, age, physical or mental disability, genetic information, veteran status, occupation, marital or familial status, political opinion, personal appearance, or any other characteristic protected by applicable law.APL is committed to providing reasonable accommodation to individuals of all abilities, including those with disabilities. If you require a reasonable accommodation to participate in any part of the hiring process, please contactAccommodations@jhuapl.edu.

The referenced pay range is based on JHU APL's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level with consideration for internal parity. For salaried employees scheduled to work less than 40 hours per week, annual salary will be prorated based on the number of hours worked. APL may offer bonuses or other forms of compensation per internal policy and/or contractual designation. Additional compensation may be provided in the form of a sign-on bonus, relocation benefits, locality allowance or discretionary payments for exceptional performance. APL provides eligible staff with a comprehensive benefits package including retirement plans, paid time off, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, education assistance, and training and development. Applications are accepted on a rolling basis.