Principal Classified Cybersecurity Analyst

Northrop Grumman•Baltimore, MD

1d•$108,800 - $163,200•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. This is a full-time, on-site role at the company’s Baltimore, Maryland location; the posting also identifies the Linthicum, Maryland campus as the on-site work location. No virtual or telecommute options are available because of the classified nature of the work. Travel is 10% of the time, and relocation assistance may be available. The analyst conducts system audits and continuous monitoring, assesses systems and networks for deviations from approved configurations and policies, validates security requirements, and recommends safeguards. The role supports government policy implementation, process tailoring, and Assessment and Authorization (A&A) activities, including risk mitigation, security certification testing, documentation, investigations, technology research, inspections, and audits. The analyst also supports formal Security Test and Evaluation (ST&E), documents A&A and related technical and coordination activities, and prepares the Risk Management Framework body of evidence. A current Secret clearance and the required Security+ certification must be maintained as conditions of continued employment.

Requirements

Meet U.S. Government 8140 requirements for a Principal Classified Cybersecurity Analyst, including Security+ certification; maintain the certification as a condition of continued employment.
Hold a current U.S. Government Secret security clearance at minimum, with a closed investigation completed within the last six years, or be enrolled in the U.S. Government Continuous Evaluation Program; maintain the required clearance as a condition of continued employment.
Meet one of the stated education and experience combinations: master’s degree and 3 years of experience; bachelor’s degree and 5 years; associate degree and 7 years; or high school diploma or equivalent and 9 years of experience, which may be considered in lieu of a completed degree.
Be willing to work full-time on-site; the classified position does not offer virtual or telecommute options.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment and Authorization under the Risk Management Framework.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Conduct system audits and continuous monitoring of security controls, configurations, and operational processes to evaluate information system security posture.
Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze established security requirements and recommend additional requirements and safeguards.
Assist with implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish program control processes to mitigate risks and support system Assessment and Authorization, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation through pre-test preparation, test participation, results analysis, and preparation of required reports.
Document A&A activities and technical and coordination activities, and prepare the Risk Management Framework body of evidence.

Benefits

Relocation assistance may be available.
Flexible work arrangements are offered, though this position itself requires on-site work and has no virtual or telecommute option.
Learning opportunities and exposure to a wide variety of projects and customers.
Friendly team environment.
Health insurance coverage.
Life and disability insurance.
Savings plan and 401(k) matching program.
Company-paid holidays.
Paid time off for vacation and/or personal business.
Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position.
A 9/80 work schedule.