Principal/Sr. Principal Cybersecurity Analyst

Northrop Grumman • Cincinnati, OH

3d • $103,600 - $193,900 • Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is hiring a Principal or Senior Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The role is full-time and on-site at the company’s Cincinnati, Ohio location; virtual and telecommuting work are not available due to the classified nature of the work. Travel is required approximately 10% of the time. Relocation assistance may be available.

The analyst evaluates and improves the security posture of classified information systems and networks, supports government cybersecurity policy and the Risk Management Framework (RMF), and prepares documentation for Assessment and Authorization (A&A). The role coordinates with program managers, system administrators, customer security assessors, engineering teams, and program management. It may be filled at Level 3 or Level 4, depending on qualifications, and includes mentoring junior cybersecurity analysts.

Candidates must have at least a current U.S. Government Secret clearance meeting the posting’s investigation or Continuous Evaluation criteria, and be able to obtain and maintain a Top Secret clearance and access to Special Access Programs and SCI Programs. Candidates must also meet the applicable U.S. Government 8140 certification requirement: Security+ or equivalent for Level 3, or CISSP or equivalent for Level 4. A missing required certification must be obtained within 60 days of hire as a condition of continued employment.

Requirements

• Level 3: Master’s degree and 3 years of relevant experience, bachelor’s degree and 5 years, associate degree and 7 years, or high school diploma/GED and 9 years of relevant experience (the latter may be considered in lieu of a completed degree).
• Level 4: Master’s degree and 6 years of relevant experience, bachelor’s degree and 8 years, associate degree and 10 years, or high school diploma/GED and 12 years of relevant experience (the latter may be considered in lieu of a completed degree).
• Meet U.S. Government 8140 requirements for Principal Cybersecurity Analyst: Security+ or equivalent for Level 3. If not already certified, obtain the certification within 60 days of hire as a condition of continued employment.
• Meet U.S. Government 8140 requirements for Senior Principal Cybersecurity Analyst: CISSP or equivalent for Level 4. If not already certified, obtain the certification within 60 days of hire as a condition of continued employment.
• Have a current U.S. Government Secret clearance at minimum, with a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation Program.
• Be able to obtain and maintain a U.S. Government Top Secret clearance and access to Special Access Programs and SCI Programs.
• Be willing to work full-time on-site at the Cincinnati, Ohio location; virtual and telecommuting work are not available.
• Be willing to travel approximately 10% of the time.

Nice To Haves

• Bachelor’s degree in Cybersecurity or a related field.
• Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
• Current U.S. Government Top Secret clearance.
• Knowledge of security tools such as eMASS, Xacta, ACAS, Nessus, Splunk, SEPM, and SCAP.
• Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

• Conduct system audits and continuous monitoring of security controls, configurations, and operational processes.
• Assess systems and networks in networking environments or enclaves, and identify deviations from acceptable configurations, enclave policy, or local policy.
• Assist with implementing required government policy, recommend process tailoring, and participate in and document process activities.
• Establish program control processes to mitigate risk and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Support government-required Security Test and Evaluation (ST&E), including pre-test preparation, test participation, results analysis, and preparation of required reports.
• Document A&A and technical or coordination activities, and prepare the Risk Management Framework body of evidence.
• Coordinate with Program Managers, system administrators, and customer Security Control Assessors to meet cybersecurity standards while supporting the mission.
• Work with customer security teams to develop solutions for evolving program needs in a specialized work environment.
• Develop and follow project plans, communicating progress and roadblocks to program leaders and management.
• Collaborate with Engineering, Program Management, and other cross-functional partners.
• Mentor junior staff by reviewing work products, providing guidance and performance feedback, and promoting best practices in testing and documentation.
• Create and maintain required RMF artifacts, including diagrams, lists, memorandums, and agreements.

Benefits

• Flexible work arrangements are mentioned, although this position specifically requires full-time on-site work and offers no virtual or telecommuting option.
• Learning opportunities and exposure to a wide variety of projects and customers.
• Health insurance and healthcare benefits.
• Life and disability insurance.
• Savings plan and 401(k) matching program.
• Company-paid holidays.
• Paid time off for vacation and/or personal business.
• Potential eligibility for overtime, shift differential, and discretionary bonuses.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed