Sr. Principal Cybersecurity Analyst

Northrop Grumman•Baltimore, MD

4d•$135,800 - $203,600•Onsite

About The Position

Northrop Grumman’s CIDO Classified Solutions team is seeking a Sr. Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The role manages cybersecurity programs for assigned information systems and performs related cybersecurity work, including system reviews, security assessments, government-policy implementation, and support for Assessment and Authorization (A&A). The selected candidate must work full-time on-site at the Linthicum, Maryland location; virtual and telecommute options are not available because of the classified nature of the work. The role requires a current U.S. Government Secret clearance, a qualifying 8140 certification, and the ability to obtain and maintain access to Special Access Programs. The position offers flexible work arrangements in general, learning opportunities, exposure to varied projects and customers, a team environment, healthcare and other benefits, a 9/80 work schedule, and a 401(k) matching program. The listed primary salary range is $135,800 to $203,600. Employees may also be eligible for overtime, shift differential, and a discretionary bonus, depending on the position.

Requirements

Master’s degree and 6 years of relevant experience, or a bachelor’s degree and 8 years, or an associate’s degree and 10 years; a high school diploma or GED with 12 years of relevant experience may be considered in lieu of a completed degree.
Meet U.S. Government 8140 requirements for a Sr. Principal Cybersecurity Analyst, with CISSP or CISM certification; the certification must be maintained as a condition of continued employment.
Hold a current U.S. Government Secret security clearance at minimum, with a closed investigation completed within the last 6 years or enrollment in the U.S. Government Continuous Evaluation (CE) Program; the clearance must be maintained as a condition of continued employment.
Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.
Willingness and ability to work full-time on-site at the Linthicum, Maryland campus; no virtual or telecommute options are available.

Nice To Haves

Bachelor’s degree in Cybersecurity or a related field.
Experience in cybersecurity compliance, such as Assessment and Authorization under RMF.
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP.
Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.

Responsibilities

Manage the cybersecurity program for assigned information systems and execute cybersecurity-related tasks.
Lead regular reviews of system audits and continuous monitoring activities, covering security controls and configurations, to improve the information system security posture.
Assess systems and networks within networking environments or enclaves and identify deviations from acceptable configurations, enclave policy, or local policy.
Analyze systems to validate established security requirements and recommend additional requirements and safeguards.
Drive implementation of required government policy, recommend process tailoring, and participate in and document process activities.
Establish and oversee program control processes that mitigate risk and support system Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Lead formal Security Test and Evaluation (ST&E), including pre-test preparation, test participation, results analysis, and preparation of required reports.
Document A&A and inspection results, technical or corrective actions, and work with the security team to submit responses to the appropriate authority.
Prepare, review, and submit A&A documentation, including System Security Plans, Risk Acceptance Reports, Security Controls Traceability Matrices, and Plans of Action and Milestones.

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Healthcare and health insurance coverage
9/80 work schedule
401(k) matching program
Life and disability insurance
Company-paid holidays
Paid time off for vacation and/or personal business
Potential eligibility for overtime, shift differential, and a discretionary bonus