Sr. Principal Classified Cybersecurity Analyst

Northrop Grumman•Los Angeles, CA

1d•$142,200 - $213,400•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Sr. Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. This role manages the cybersecurity program for assigned information systems and performs security assessment, authorization, monitoring, testing, documentation, and compliance work. The position is full-time and on-site at the Woodland Hills, California campus; virtual and telecommute options are not available because of the classified nature of the work. Travel is required 10% of the time. A current U.S. Government Top Secret clearance is required, along with the ability to obtain and maintain access to Special Access Programs. The analyst will lead reviews and assessments of systems and networks, assess compliance with security requirements and policies, and coordinate risk mitigation and Assessment and Authorization activities. The role also leads formal Security Test and Evaluation activities and prepares and submits associated documentation and reports. The required education and experience are a master’s degree with six years of relevant experience, a bachelor’s degree with eight years, an associate’s degree with ten years, or a high school diploma or equivalent with twelve years of relevant experience. Candidates must meet U.S. Government 8140 requirements through CISSP or CISM certification and maintain the required certification and clearance as conditions of continued employment. The salary range is $142,200–$213,400. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus. The company describes flexible work arrangements, learning opportunities, exposure to varied projects and customers, and a friendly team environment, though this role itself must be performed on-site. Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays, paid time off, and a 401(k) matching program. The position offers a 9/80 work schedule.

Requirements

Master’s degree with 6 years of relevant experience, bachelor’s degree with 8 years, associate’s degree with 10 years, or high school diploma or equivalent with 12 years of relevant experience.
Meet U.S. Government 8140 requirements for the role through CISSP or CISM certification; the certification must be maintained as a condition of continued employment.
Current U.S. Government Top Secret security clearance, at minimum, with a closed investigation completed within the last 6 years or enrollment in the U.S. Government Continuous Evaluation Program; clearance must be maintained as a condition of continued employment.
Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.
Willingness to work full-time on-site at the Woodland Hills, California campus; no virtual or telecommute options are available.
Willingness to travel 10% of the time.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Manage the cybersecurity program for all assigned information systems and execute cybersecurity-related tasks.
Conduct and lead regular reviews of system audits and continuous monitoring activities, covering security controls and configurations.
Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze systems to validate established security requirements and recommend additional requirements and safeguards.
Drive implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish and oversee program control processes that mitigate risk and support system Assessment and Authorization, including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead formal Security Test and Evaluation activities required by government accrediting authorities, including preparation, participation, results analysis, and report preparation.
Document Assessment and Authorization and inspection results, including technical or corrective actions, and work with the security team to submit responses to the appropriate authority.
Prepare, review, and submit Assessment and Authorization documentation, including System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones.

Benefits

401(k) matching program
Health insurance coverage
Life insurance
Disability insurance
Savings plan
Company-paid holidays
Paid time off (PTO) for vacation and/or personal business
Potential eligibility for overtime, shift differential, and a discretionary bonus
9/80 work schedule
Flexible work arrangements are mentioned generally, although this position is required to be on-site