Principal / Cybersecurity Analyst - 19945 19944 19943 - Roy Utah

Northrop Grumman • Roy, UT

2d • $79,300 - $147,600 • Onsite

About The Position

Northrop Grumman’s Classified Solutions team is seeking a Principal / Cybersecurity Analyst to support information systems lifecycle activities. The position is full-time and on-site at the company’s Roy, Utah location; virtual and telecommute work are not available because of the classified nature of the work. A current U.S. Government Top Secret clearance is required, and the role requires travel 10% of the time. The successful candidate must be able to obtain and maintain access to Special Access Programs as a condition of continued employment.

The role supports cybersecurity assessments and authorization, security testing, continuous monitoring, risk mitigation, and preparation of security documentation for classified information systems. The posting describes qualifications for Level 2 and Level 3, with the selected level determining the applicable experience and salary range.

Requirements

• Level 2: Master’s degree and 0 years of experience, or bachelor’s degree and 2 years, or associate’s degree and 4 years, or high school diploma (or equivalent) and 6 years.
• Level 3: Master’s degree and 2 years of experience, or bachelor’s degree and 4 years, or associate’s degree and 6 years, or high school diploma (or equivalent) and 8 years.
• Meet U.S. Government 8140 requirements for Cybersecurity (722), such as Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP.
• Have a current U.S. Government Top Secret security clearance, with a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
• Be able to obtain and maintain access to Special Access Programs as a condition of continued employment.
• Be willing to work full-time on-site in Roy, Utah; virtual and telecommute options are not available.

Nice To Haves

• Bachelor’s degree in Cybersecurity or a related field.
• Experience in cybersecurity compliance, such as Assessment & Authorization under RMF.
• Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
• Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

• Conduct system audits and continuous monitoring of security controls, configurations, and operational processes to evaluate information-system security posture.
• Assess systems and networks within networking environments or enclaves and identify deviations from acceptable configurations, enclave policy, or local policy.
• Analyze and validate established security requirements and recommend additional security requirements and safeguards.
• Assist with implementing required government policy, recommend process tailoring, and participate in and document process activities.
• Establish program control processes to mitigate risks and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Support formal Security Test and Evaluation (ST&E) through pre-test preparation, test participation, results analysis, and preparation of required reports.
• Document A&A, technical, and coordination activities and prepare the Risk Management Framework body of evidence.

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company-paid holidays.
• Paid time off (PTO) for vacation and/or personal business.
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: High school or GED