Classified Cybersecurity Analyst

Northrop Grumman•Cincinnati, OH

3d•$83,400 - $125,200•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Classified Cybersecurity Analyst to support information system lifecycle activities. This is a full-time, on-site position at the company’s Cincinnati, Ohio location. The role supports classified systems and requires a current U.S. Government Secret clearance, with the selected candidate also required to obtain and maintain a Special Access Program clearance. Travel is 10% of the time.

Requirements

One of the following education and experience combinations: a master’s degree and 0 years of experience; a bachelor’s degree and 2 years; an associate’s degree and 4 years; or a high school diploma or equivalent and 6 years of experience, which may be considered in lieu of a completed degree.
Current U.S. Government Secret security clearance at minimum, with a closed investigation completed within the last 6 years, or enrollment in the U.S. Government Continuous Evaluation (CE) Program. The clearance must be maintained as a condition of continued employment.
Ability to obtain and maintain a Special Access Program (SAP/SAR) clearance as a condition of continued employment.
Meet U.S. Government 8140 requirements for a Cybersecurity Analyst – Security+. Candidates without a current Security+ certification must be able to obtain it within 90 days of hire as a condition of continued employment.
Willingness to work full-time on-site in Cincinnati, Ohio; virtual and telecommute work options are not available.
U.S. citizenship is required for positions with a government clearance and certain other restricted positions.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment & Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, eMASS, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Conduct system audits and continuous monitoring activities across security controls, configurations, and operational processes to evaluate information-system security posture.
Assess systems and networks in networking environments or enclaves and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze and validate established security requirements and recommend additional requirements and safeguards.
Assist with implementing required government policy, recommend process tailoring, and participate in and document process activities.
Work within program control processes to mitigate risks and support Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging-technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation (ST&E), including pre-test preparation, participation in tests, analysis of results, and preparation of required reports.
Document A&A, technical, and coordination activities and prepare the Risk Management Framework body of evidence.

Benefits

Relocation assistance may be available.
Flexible work arrangements are offered, though this position itself requires on-site work and does not offer virtual or telecommute options.
Learning opportunities and exposure to a wide variety of projects and customers.
Friendly team environment.
Health insurance coverage.
Life and disability insurance.
Savings plan.
Company-paid holidays.
Paid time off for vacation and/or personal business.
9/80 work schedule.
401(k) matching program.
Employees may be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.