Principal/Senior Principal Cybersecurity Analyst--Huntsville

Northrop Grumman•Huntsville, AL

47d

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Defense Systems is seeking Principal/Senior Principal Cybersecurity Analyst . This position will be located in Huntsville, Alabama and will support the Sentinel program. What you'll get to do The individual will be responsible for providing expert level configuration and implementation of security compliance for multiple cloud boundaries at SAP Program levels (SAP) using Joint Special Access Program Implementation Guide (JSIG), and DOD Collateral using DCSA Assessment and Authorization Process Manual (DAAPM) / National Industrial Security Program Operating Manual (NISPOM). The individual will work alongside peers to help develop and implement a full range of tools to make up a strong security architecture for fast passed and dynamic cloud based programs for Northrop Grumman. The individual will be responsible for ensuring their statement of work is being completed while delegating lower tasks to be completed by junior cybersecurity. The individual will also provide mentoring junior cybersecurity to raise the bar of the overall cybersecurity team. This role may be filled a Principal or Senior Principal level, depending on years of experience.

Requirements

Level 03, Principal: Bachelor's Degree with 5 years' of related experience, Master's degree and 3 years of related experience, or PhD with 1 year of related experience. An additional 4 years of related experience may be considered in lieu of degree.
Level 04, Sr Principal: Bachelor's Degree with 9 years of related experience, Master's degree and 7 years of related experience, or PhD with 4 years of related experience. An additional 4 years of related experience may be considered in lieu of degree.
DoD IAT Level II (Principal) or IAT Level III/IAM Level II (Sr. Principal) certification
Knowledge of Risk Management Framework (RMF), Security Technical Implementation Guide (STIG), and requirements development from control listings.
Proficient in managing multiple responsibilities related to the engineering and implementation of Program Security Information and Event Management (SIEM)/Security Orchestration, Automation, and Response (SOAR) tools.
Capable of assessing the Program's system security posture in compliance with customer requirements and directives.
Adept at adjusting commercial security methodologies and technologies within sensitive and proprietary customer environments in accordance with NIST 800-53.
An active Secret Clearance is required to start

Nice To Haves

Experience implementing cybersecurity requirements in cloud platforms
Strong Domain experience in Cloud Security in multi cloud enterprise environments
Knowledge and hands on experience for designing and implementing new controls based on gap analysis and requirements
Knowledge and hands on experience with cloud cybersecurity tools
Experience developing cybersecurity policies, processes and tools for cybersecurity frameworks and industry best practices supporting National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53
An active Top Secret Clearance would be preferred

Responsibilities

providing expert level configuration and implementation of security compliance for multiple cloud boundaries at SAP Program levels (SAP) using Joint Special Access Program Implementation Guide (JSIG), and DOD Collateral using DCSA Assessment and Authorization Process Manual (DAAPM) / National Industrial Security Program Operating Manual (NISPOM)
work alongside peers to help develop and implement a full range of tools to make up a strong security architecture for fast passed and dynamic cloud based programs for Northrop Grumman
ensuring their statement of work is being completed while delegating lower tasks to be completed by junior cybersecurity
providing mentoring junior cybersecurity to raise the bar of the overall cybersecurity team