Classified Cybersecurity Analyst

Northrop Grumman•Baltimore, MD

3d•$87,600 - $131,400•Onsite

About The Position

Northrop Grumman's Mission Systems sector is seeking a Junior ISSO for its Classified Solutions team in Baltimore, Maryland. Because the position involves classified work, the selected candidate must work full-time on-site at the Baltimore/Linthicum campus; it is not a remote opportunity. The role supports secure systems and networks through cybersecurity assessments, risk mitigation, certification and accreditation, and compliance with government security policies. Travel is 10% of the time, and a Secret clearance is required to start.

Requirements

Associate's degree and 4 years of relevant experience, Bachelor's degree and 2 years of relevant experience, or Master's degree and no experience; a high school diploma or equivalent and 6 years of relevant experience may be considered instead of a completed degree.
Current U.S. Government Secret clearance at minimum, with a closed investigation completed within the last 6 years or enrollment in the DoD Continuous Evaluation Program (CEP); clearance must be maintained as a condition of continued employment.
Ability to obtain and maintain access to Special Programs as a condition of continued employment.
Current Security+CE certification, which must be maintained as a condition of continued employment.
Ability to apply knowledge of business and cybersecurity concepts, tools, and processes to program decisions, actions, and performance.
Ability to manage stakeholder communications through organized processes so program information is defined, collected, shared, understood, stored, and retrieved to meet program and stakeholder needs within cybersecurity risk tolerance.
Ability to identify and address cybersecurity program impacts proactively, communicating, monitoring, and promptly resolving conflicts across all program levels.

Nice To Haves

Bachelor's degree in Cyber Security, Information Security, or a similar STEM-related discipline.
Diverse classified information systems security or information assurance background.
Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, JSIG, system audits, vulnerability scanning, or RMF package development.
Prior experience communicating with customers and program leadership.
Current U.S. Government Top Secret/SCI clearance.

Responsibilities

Assess systems and networks within networking environments or enclaves for deviations from acceptable configurations, enclave policy, or local policy using compliance audits and vulnerability assessments.
Establish program control processes to mitigate risk and support system certification and accreditation, including process support, analysis, coordination, security certification testing and documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
Assist with implementation of government policy, including RMF, DAAPM, and NIST; recommend process tailoring and participate in and document process activities.
Analyze established security requirements and recommend additional requirements and safeguards.
Support formal Security Test and Evaluation (ST&E), including pre-test preparation, test participation, results analysis, and required reports.
Complete Assessment and Authorization activities and RMF Body of Evidence documentation, including the SSP, SCTM, Control Family SOPs, Continuous Monitoring Plan, and POA&M.
Perform recurring cybersecurity statement-of-work activities, including auditing, configuration management, user training, POA&M updates, continuous-monitoring checklists, and self-inspections.

Benefits

Flexible work arrangements
Learning opportunities
Friendly team environment
Exceptional benefits and healthcare
9/80 work schedule
401(k) matching program
Health insurance
Life and disability insurance
Company-paid holidays
Paid time off for vacation and/or personal business
Potential overtime, shift differential, and discretionary bonus, depending on the position