Sr Principal Cybersecurity Analyst – Cybersecurity T& E Lead (26-398)

Northrop Grumman • Colorado Springs, CO

11d • $129,300 - $193,900 • Onsite

About The Position

Northrop Grumman Space Systems—Missile Defense Integration offers an excellent opportunity for a Sr Principal Cybersecurity Analyst – Cybersecurity Test & Evaluation (T&E) Lead (26-398) to join our team of skilled and diverse professionals. Based at Colorado Springs, CO, this role is essential to supporting the U.S. President, the Secretary of Defense, and combatant commanders at the strategic, regional, and operational levels. This position does not provide relocation assistance and requires on-site work with no remote options. The Command and Control, Battle Management, and Communications (C2BMC) program is a key component of the Missile Defense System. It is a vital operational system that enables the U.S. president, the Secretary of Defense, and combatant commanders at strategic, regional, and operational levels to plan ballistic missile defense operations, monitor the battle, and dynamically control networked sensors and weapon systems to achieve global and regional mission goals. C2BMC supports layered missile defense capabilities that enable an optimized response to threats across all ranges and flight phases. It serves as a force multiplier by networking, integrating, and synchronizing autonomous sensor and weapon systems and operations, both globally and regionally, to improve performance. C2BMC is essential for all ground and flight tests that verify and demonstrate the current and future capabilities of missile defense systems. The Cybersecurity T&E Lead will report to C2BMC Program leadership and coordinate at least 20 high-visibility MDA Cyber Events for the C2BMC element of the Ballistic Missile Defense System (BMDS). This role leads to Cybersecurity Test & Evaluation (T&E) planning, execution, and reporting across multiple T&E projects and MDA Cyber Events. It drives actionable cyber metrics and improvements into the C2BMC Agile Development Lifecycle.

Requirements

• A Bachelor’s Degree in Computer Science, Cybersecurity, Engineering, Information Technology, Mathematics, Physics, or a related field from an accredited university, along with 8 years of experience; or a Master’s degree in a related field with 6 years of relevant work experience; or 12 years of relevant work experience may be considered as an alternative to a degree
• Applicants must have a current, active Government-Issued 8140 certification at IAT Level II or higher (such as Security+ CE, CCNA-Security, CySA+, CND, etc.) at the time of application, which is required to start. The candidate is responsible for maintaining their 8140 certifications throughout the entire contract period
• Applicants must have a current, active in-scope Government-issued Secret security clearance at the time of application, which is required to start
• Willingness to travel 10% of the time for business needs
• Demonstrated ability to: Advise C2BMC leadership and senior MDA leadership on the planning and execution of MDA Cyber Events
• Demonstrated ability to: Consult on and brief complex technical cyber topics to senior stakeholders in a confident, well‑organized, and mission‑focused manner
• Demonstrated ability to: Evaluate the effectiveness of cybersecurity architecture and engineering solutions for suitability, survivability, and interoperability, and provide key feedback to improve C2BMC’s overall cyber posture
• Demonstrated experience: Leading advanced research and development of solutions to emerging cybersecurity threats, including analysis of security findings/weaknesses and development of executable POAMs for remediation and revalidation of fixes
• Demonstrated experience: Reviewing and influencing test plans, engineering documentation, and complex cyber event scenarios, with extensive coordination across multiple stakeholders and organizations
• Demonstrated experience: Serving as a Subject Matter Expert (SME) in DoD cyber policy and directives, USCYBERCOM guidance, NIST standards, and RMF controls for mission systems

Nice To Haves

• Experience supporting C2BMC, MDIOC, or MDA cyber events in an operational or test environment.
• Hands‑on involvement with Security Test & Evaluation (ST&E), vulnerability assessments, penetration testing, and/or red‑team exercises for complex, mission‑critical systems.
• Familiarity with Agile development environments and integrating cyber requirements, findings, and POAMs into iterative delivery.
• Experience leading cross‑discipline teams across operations, systems engineering, software, and cybersecurity in a high‑visibility DoD environment

Responsibilities

• Lead the end‑to‑end Cybersecurity T&E lifecycle (planning, execution, analysis, reporting) for multiple C2BMC T&E projects and MDA Cyber Events
• Coordinate across the National Team and C2BMC stakeholders to ensure appropriate resources and representation at each event
• Conduct post‑event analysis; synthesize cyber findings; and ensure solutions and remediation plans are incorporated into the Agile development and deployment cycle
• Research, develop, and recommend appropriate cybersecurity countermeasures for networks, systems, and applications based on test data, red‑team activities, and vulnerability assessments
• Support and interface with multiple external T&E organizations; identify gaps in security architecture and recommend mitigations for inclusion in C2BMC’s cyber risk strategy and POAMs
• Maintain and evolve Cyber T&E Plans and POAMs to ensure compliance with DoD policies and directives, USCYBERCOM guidance, NIST standards, and RMF controls for mission systems
• Provide USCYBERCOM‑aligned guidance and risk mitigation to strengthen C2BMC’s defensive posture, minimum security requirements, and mission assurance
• Collaborate with other T&E organizations to develop rules of engagement (RoE), tailored test plans, and synchronized schedules across all C2BMC cyber T&E efforts
• Frequently brief MDA Executive leadership and senior C2BMC leadership, translating complex technical cyber information into clear, concise mission‑focused updates
• Ensure team projects are completed on schedule, following established program procedures, schedules, and work plans
• Serve as a self‑initiated leader, capable of directing large groups of people and complex data sets to drive cyber‑relevant solutions and improve the C2BMC cyber posture
• Support on‑call, evening, and weekend activities during system anomalies and/or Cybersecurity tests
• Travel to CONUS and/or OCONUS locations as required based on mission and test event requirements

Benefits

• Health Plan
• Savings Plan
• Paid Time Off
• Education Assistance
• Training and Development
• Flexible Work Arrangements
• health insurance coverage
• life and disability insurance
• Company paid holidays and paid time off (PTO) for vacation and/or personal business

What This Job Offers

• Job Type: Full-time
• Career Level: Senior