Principal Classified Cybersecurity Analyst

$102,400 - $153,600/Yr

Northrop Grumman - Aurora, CO

Full-time - Senior

Aurora, CO

10,001+ employees

Computer and Electronic Product Manufacturing

About the position

The Principal Classified Cybersecurity Analyst at Northrop Grumman is responsible for supporting the cybersecurity of classified systems within the Department of Defense and Intelligence Community. This role involves performing assessments of systems and networks, ensuring compliance with security policies, and managing the certification and accreditation processes. The position requires a strong understanding of cybersecurity frameworks and the ability to work collaboratively in a dynamic environment to address complex security challenges.

Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave.
• Identify deviations from acceptable configurations, enclave policy, or local policy.
• Establish strict program control processes to ensure risk mitigation.
• Support obtaining certification and accreditation of systems.
• Assist in the implementation of required government policy and make recommendations on process tailoring.
• Participate in and document process activities related to cybersecurity.
• Perform analyses to validate established security requirements and recommend additional safeguards.
• Support the formal Security Test and Evaluation (ST&E) required by government accrediting authorities.
• Document results of Certification and Accreditation activities and prepare system Security Plans.
• Conduct periodic reviews of system audits and monitor corrective actions.

Requirements

• Master's degree with 3 years of experience; OR a Bachelor's degree with 5 years of experience; OR an Associates degree with 7 years of experience; OR a High School Diploma/GED with 9 years of experience.
• Must have a DoD 8570 IAM level II (or higher) security certification (e.g., CAP, CASP CE, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP).
• Candidates must have a current DOD Top Secret/SCI level security clearance, including a recent Polygraph adjudicated within the last 5 years.
• Ability to obtain and maintain access to Special Programs as a condition of continued employment.

Nice-to-haves

• Bachelor's degree in Cyber Security.
• CISSP certification.
• 6 years of experience with Certification and Accreditation of classified systems and Risk Management Framework / eMASS.
• Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, DIACAP, NISPOM, system audits, vulnerability scanning, and RMF package development.
• Experience working on a multidisciplinary team and writing technical documents.
• Excellent communication and interpersonal skills.
• Experience with analyzing enterprise-level security tools and audit analysis using SEIM applications.
• Experience with gathering Body of Evidence (BoE) from various tools or raw logs.
• Familiarity with NIST 800 series and other NIST documentation.
• Experience with Risk Management Framework (RMF) and Security Technical Implementation Guide (STIG).
• Experience with Atlassian products including Confluence and JIRA.

Benefits

• Relocation assistance may be available.
• Exceptional benefits and healthcare coverage.
• 401k matching program.
• Flexible work arrangements.
• 9/80 work schedule.
• Phenomenal learning opportunities and exposure to a variety of projects.