Principal Cybersecurity Analyst

Northrop Grumman•Los Angeles, CA

9d•$114,000 - $171,000•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The position is full-time and on-site at the company’s Woodland Hills, California location; remote and telecommuting options are not available due to the classified nature of the work. The role requires a current Top Secret clearance and the ability to obtain and maintain access to Special Access Programs. Travel is required 10% of the time. The analyst will evaluate the security posture of information systems through audits and continuous monitoring, assess systems and networks for deviations from approved configurations and policies, validate security requirements, and support government policy implementation. The role also supports risk mitigation and Assessment and Authorization (A&A), including security testing, documentation, investigations, technology research, inspections, and audits. The analyst will participate in formal Security Test and Evaluation activities and prepare reports and the Risk Management Framework body of evidence. The position requires a degree and experience combination specified in the basic qualifications, or qualifying high school-level education and experience, as well as the Security+ CE certification required under U.S. Government 8140 requirements. The certification and security clearance must be maintained as a condition of continued employment. The salary range is $114,000 to $171,000. Northrop Grumman offers benefits including health insurance, life and disability insurance, a savings plan, company-paid holidays, paid time off, and a 401(k) matching program. The role also offers a 9/80 work schedule and flexible work arrangements, while remaining on-site.

Requirements

Master’s degree and 3 years of experience, bachelor’s degree and 5 years of experience, or associate degree and 7 years of experience; a high school diploma or equivalent with 9 years of experience may be considered in lieu of a completed degree.
Meet U.S. Government 8140 requirements for a Principal Cybersecurity Analyst, including Security+ CE certification, and maintain the certification as a condition of continued employment.
Have a current U.S. Government Top Secret clearance, including a closed investigation completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
Maintain the required security clearance as a condition of continued employment.
Be able to obtain and maintain access to Special Access Programs as a condition of continued employment.
Work full-time on-site at the Woodland Hills, California campus; virtual and telecommuting options are not available.
Travel 10% of the time.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment & Authorization under RMF.
CI Polygraph.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Conduct system audits and continuous monitoring of security controls, configurations, and operational processes to evaluate information-system security posture.
Assess systems and networks within networking environments or enclaves and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze systems to validate established security requirements and recommend additional security requirements and safeguards.
Assist in implementing required government policy, recommend process tailoring, and participate in and document process activities.
Establish program control processes to mitigate risks and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging-technology research, inspections, and periodic audits.
Support formal Security Test and Evaluation (ST&E) activities through pre-test preparation, participation, analysis of results, and preparation of required reports.
Document A&A results and technical or coordination activities, and prepare the Risk Management Framework body of evidence.

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Health insurance coverage
Life and disability insurance
Savings plan
Company-paid holidays
Paid time off (PTO) for vacation and/or personal business
401(k) matching program
9/80 work schedule
Potential eligibility for overtime, shift differential, and discretionary bonus, depending on the position