Classified Cybersecurity Analyst 3/4 - TS/SCI

Northrop Grumman•Aurora, CO

1d•$114,000 - $193,900•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Classified Cybersecurity Analyst to support information systems lifecycle activities. The position may be filled at level 3 or level 4, depending on qualifications. It is full-time and requires on-site work at the Aurora, Colorado location; virtual and telecommute options are not available due to the classified nature of the work. A current U.S. Government Top Secret clearance, including SCI eligibility, is required, along with the ability to obtain and maintain access to Special Access Programs. The role manages cybersecurity programs for assigned information systems and performs activities supporting system Assessment and Authorization (A&A), security testing, continuous monitoring, compliance, and risk mitigation. The analyst works with security teams and government authorities to assess systems, document findings, prepare required security documentation, and support corrective actions.

Requirements

Level 3: Master’s degree and 3 years of relevant technical experience; or bachelor’s degree and 5 years; or associate degree and 7 years; or high school diploma/GED and 9 years.
Level 4: Master’s degree and 6 years of relevant technical experience; or bachelor’s degree and 8 years; or associate degree and 10 years; or high school diploma/GED and 12 years.
Meet U.S. Government 8140 requirements (8570 equivalent) for a Classified Cybersecurity Analyst—IAM level I certification or higher. Listed examples include Security+, CND, Cloud+, CAP or CGRC, CASP+ or CompTIA Security X, CISSP-Associate, CISM, CISSP, GSLC, and CCISO.
Hold a current U.S. Government Top Secret security clearance, at minimum, including SCI access-level eligibility based on a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
Be able to obtain and maintain access to Special Access Programs as a condition of continued employment.
Be willing to work full-time on-site in Aurora, Colorado; no virtual or telecommute option is offered.
U.S. citizenship is required for positions requiring a government clearance.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Security+ CE certification.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
SAP/SAR access, SCI access, and/or a polygraph.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Manage the cybersecurity program for assigned information systems and execute cybersecurity-related tasks.
Conduct and lead regular reviews of system audits and continuous monitoring activities covering security controls and configurations.
Assess systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
Analyze systems to validate established security requirements and recommend additional requirements and safeguards.
Drive implementation of required government policy; recommend process tailoring; and participate in and document process activities.
Establish and oversee program control processes that mitigate risk and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead formal Security Test and Evaluation (ST&E), including pre-test preparation, participation in tests, analysis of results, and preparation of reports.
Document A&A and inspection results, technical or corrective actions, and work with the security team to submit responses to the appropriate cognizant authority.
Prepare, review, and submit A&A documentation, including System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones.

Benefits

Flexible work arrangements are mentioned, although this specific classified role requires on-site work and offers no virtual or telecommute option.
Learning opportunities and exposure to a wide variety of projects and customers.
Friendly team environment.
Health insurance and healthcare coverage.
Life and disability insurance.
401(k) matching program.
Company-paid holidays.
Paid time off (PTO) for vacation and/or personal business.
9/80 work schedule.
Potential eligibility for overtime, shift differential, and discretionary bonus, depending on the position.