Sr Principal Classified Cybersecurity Analyst - Top Secret

Northrop Grumman•Colorado Springs, CO

11d•$129,300 - $193,900•Onsite

About The Position

Northrop Grumman’s Classified CIDO Solutions team is seeking a Sr. Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The position is full-time and on-site at the company’s Colorado Springs, Colorado location; virtual and telecommuting work options are not available due to the classified nature of the work. A current Top Secret clearance is required, and the employee must be able to obtain and maintain access to Special Programs as a condition of continued employment. Travel is 10% of the time. The analyst manages cybersecurity programs for assigned information systems and carries out cybersecurity tasks, including system reviews, assessments, compliance analysis, and support for government Assessment and Authorization (A&A). The role leads Security Test and Evaluation activities and prepares and submits A&A documentation for review and approval. Northrop Grumman offers flexible work arrangements, learning opportunities, exposure to a wide variety of projects and customers, and a friendly team environment. The role has a 9/80 work schedule. The primary salary range is $129,300–$193,900, with base salary determined by factors such as responsibilities, experience, education, skills, and market conditions. Depending on the position, employees may also be eligible for overtime, shift differential, and a discretionary bonus. Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays, and paid time off.

Requirements

Master’s degree and 6 years of relevant technical experience; or Bachelor’s degree and 8 years; or Associate’s degree and 10 years; or High School Diploma/GED and 12 years.
Experience with Linux (RHEL), eMass, SIEM tools, and compliance scanning.
Meet U.S. Government 8140 requirements (8570 equivalent) for a Sr Principal Classified Cybersecurity Analyst – IAM Level III; examples include CISM, CISSP, GSLC, and CCISO.
Current Top Secret security clearance, at a minimum, to be considered.
Ability to obtain and maintain access to Special Programs as a condition of continued employment.
Willingness to work full-time on-site in Colorado Springs, Colorado; virtual and telecommuting work options are not available.
U.S. citizenship is required for positions requiring a government clearance.

Nice To Haves

Master’s degree in Cyber Security.
10 years of experience with certification and accreditation of classified systems and Risk Management Framework.
Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, RMF, system audits, vulnerability scanning, and RMF package development.
Knowledge of security tools such as Elk and Trellix.
Knowledge of security frameworks and documentation such as DAAG, SSPs, and SCTMs.
Active Top Secret clearance and SAP access.

Responsibilities

Manage the cybersecurity program for all assigned information systems and execute cybersecurity-related tasks.
Conduct and lead regular reviews of system audits and continuous monitoring activities, covering security controls and configurations, to improve the information system security posture and operational efficiency.
Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze systems to validate established security requirements and recommend additional requirements and safeguards.
Drive implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish and oversee program control processes that mitigate risk and support system Assessment and Authorization, including process support, analysis, coordination, security certification testing and documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead formal Security Test and Evaluation required by government accrediting authorities, including pre-test preparation, test participation, results analysis, and preparation of required reports.
Document A&A and inspection results, technical or corrective actions, and work with the security team to submit responses to the appropriate cognizant authority.
Prepare, review, and submit A&A documentation, including System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones, for review and approval.

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
9/80 work schedule
Health insurance coverage
Life insurance
Disability insurance
Savings plan
Company-paid holidays
Paid time off (PTO) for vacation and/or personal business
Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position