Principal Classified Cybersecurity Analyst - Top Secret

Northrop Grumman•Dulles, VA

2d•$114,000 - $171,000•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The position is full-time and on-site at the company’s Dulles, Virginia location; virtual and telecommute work are not available because of the classified nature of the work. A current U.S. Government Top Secret clearance is required, and the employee must be able to obtain and maintain access to Special Programs (SAP/SAR). The analyst evaluates information-system security posture through audits, continuous monitoring, system and network assessments, and analysis of security requirements and safeguards. The role supports government policy implementation, risk mitigation, Assessment and Authorization (A&A), Security Test and Evaluation (ST&E), and preparation of Risk Management Framework evidence and reports.

Requirements

One of the following education and IT experience combinations: a master’s degree and 3 years of IT experience; a bachelor’s degree and 5 years; an associate degree and 7 years; or a high school diploma/GED and 9 years.
Meet U.S. Government 8140 requirements for a Principal Cybersecurity Analyst, including an IAM Level II equivalent or higher security certification. Examples include CAP/CGRC, CASP+/SecurityX, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP.
Hold a current U.S. Government Top Secret clearance at minimum, with a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
Ability to obtain and maintain access to Special Programs (SAP/SAR) as a condition of continued employment.
Willingness to work on-site in Dulles, Virginia; the position does not offer virtual or telecommute options.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Security+ CE.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
Top Secret, SAP/SAR access, SCI access, and/or a polygraph.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Conduct system audits and continuous monitoring of security controls, configurations, and operational processes to evaluate information-system security posture.
Assess systems and networks in networking environments or enclaves, and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze and validate established security requirements and recommend additional requirements and safeguards.
Assist with implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish program control processes to mitigate risks and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation (ST&E) through pre-test preparation, test participation, results analysis, and preparation of required reports.
Document A&A results and technical or coordination activities, and prepare the Risk Management Framework body of evidence.

Benefits

Flexible work arrangements (though this role itself requires on-site work).
Learning opportunities.
Exposure to a wide variety of projects and customers.
Friendly team environment.
Health insurance coverage.
Life and disability insurance.
Savings plan.
Company-paid holidays.
Paid time off for vacation and/or personal business.
9/80 work schedule.
401(k) matching program.
Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position.