Principal Classified Cybersecurity Analyst

Northrop Grumman•Beale AFB, CA

4d•$108,800 - $163,200•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Classified Cybersecurity Analyst to support information system lifecycle activities. The role is primarily on-site full-time at Beale AFB, California. Because of the classified nature of the work, virtual and telecommuting options are not available. The position requires a current U.S. Government Top Secret clearance and the ability to obtain and maintain access to Special Programs. Travel is 10% of the time, and relocation assistance may be available. The analyst evaluates information-system security posture through audits and continuous monitoring, assesses systems and networks for deviations from approved configurations and policies, and validates security requirements. The role also supports government policy implementation, risk mitigation, Assessment and Authorization (A&A), Security Test and Evaluation (ST&E), and preparation of the Risk Management Framework body of evidence and related documentation.

Requirements

Master’s degree and 3 years of relevant experience; or a bachelor’s degree and 5 years; or an associate degree and 7 years; or a high school diploma or equivalent and 9 years.
Meet U.S. Government 8140 requirements for a Cybersecurity (722) role, such as Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP.
Hold a current U.S. Government Top Secret security clearance at minimum.
Have the ability to obtain and maintain access to Special Programs as a condition of employment.
U.S. citizenship is required for positions requiring a government clearance.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Top Secret/SCI, SAP/SAR access, SCI access, and/or a polygraph.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Conduct system audits and continuous monitoring of security controls, configurations, and operational processes to evaluate information-system security posture.
Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze and validate established security requirements, and recommend additional security requirements and safeguards.
Assist with implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish program control processes to mitigate risks and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support formal government Security Test and Evaluation (ST&E), including pre-test preparations, participation in tests, analysis of results, and preparation of required reports.
Document A&A results and technical or coordination activities, and prepare the Risk Management Framework body of evidence.

Benefits

Relocation assistance may be available.
Flexible work arrangements.
Learning opportunities.
Health insurance and healthcare benefits.
Life and disability insurance.
9/80 work schedule.
401(k) matching program.
Company-paid holidays.
Paid time off for vacation and/or personal business.
Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position.