Sr Principal/Principal Cybersecurity Analyst - 19900 19874 - Roy UT

Northrop Grumman•Roy, UT

1d•$98,400 - $184,200•Onsite

About The Position

Northrop Grumman is seeking a Sr. Principal/Principal Classified Cybersecurity Analyst for its Classified Solutions team in Roy, Utah. The role supports information systems lifecycle activities and requires full-time, on-site work. The analyst designs, integrates, and maintains Cross-Domain Solutions (CDS) for secure, policy-compliant data transfer between classified and unclassified networks. Work includes risk assessments, hardware and software configuration, rigorous testing, and ongoing support to maintain compliance with U.S. Government security directives. The position manages cybersecurity programs for assigned information systems, assesses security posture and compliance, supports system Assessment and Authorization (A&A), and leads Security Test and Evaluation (ST&E). The analyst prepares and submits security documentation, records assessment and inspection results, and works with the security team to respond to the appropriate authorities. A current U.S. Government Top Secret clearance is required, along with the ability to obtain and maintain Special Access Program access. The role is available at two levels, with separate basic qualification requirements and salary ranges. Relocation assistance may be available, and travel is required approximately 10% of the time. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus. Northrop Grumman provides health insurance, life and disability insurance, a savings plan, company-paid holidays, and paid time off.

Requirements

Level 3: Master’s degree and 3 years of experience, bachelor’s degree and 5 years, associate’s degree and 7 years, or high school diploma/equivalent and 9 years.
Level 4: Master’s degree and 6 years of experience, bachelor’s degree and 8 years, associate’s degree and 10 years, or high school diploma/equivalent and 12 years.
Meet U.S. Government 8140 requirements for Cybersecurity (722), such as Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP.
Hold a current U.S. Government Top Secret clearance at minimum, with a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.
Willingness to work full-time on-site in Roy, Utah; virtual and telecommute options are not available.
Ability to travel 10% of the time.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.
Experience designing, implementing, and supporting Cross-Domain Solutions for secure data transfer across classified networks.

Responsibilities

Manage the cybersecurity program for assigned information systems and execute cybersecurity-related tasks.
Lead regular reviews of system audits and continuous monitoring activities, including reviews of security controls and configurations.
Assess systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations and applicable enclave or local policies.
Analyze and validate established security requirements and recommend additional requirements and safeguards.
Drive implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish and oversee program control processes that mitigate risk and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead formal Security Test and Evaluation (ST&E) activities, including pre-test preparation, test participation, analysis of results, and preparation of required reports.
Document A&A and inspection results, including technical or corrective actions, and work with the security team to submit responses to the appropriate cognizant authority.
Prepare, review, and submit A&A documentation, including System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones.
Design, integrate, and maintain Cross-Domain Solutions for secure data transfer between classified and unclassified networks.
Conduct risk assessments, configure hardware and software, perform testing, and provide ongoing support to maintain compliance with U.S. Government security directives.