Principal Cybersecurity Analyst Cybersecurity Engineer (24-373.2)

$97,500 - $146,300/Yr

Northrop Grumman - Schriever Air Force Base, CO

Full-time - Senior

Schriever Air Force Base, CO

Computer and Electronic Product Manufacturing

About the position

The Principal Cybersecurity Analyst - Cybersecurity Engineer position at Northrop Grumman involves working on the Command and Control, Battle Management, and Communications (C2BMC) program, which integrates the Missile Defense System. This role is crucial for enabling high-level defense operations and ensuring the security and compliance of systems and networks. The position requires a strong background in cybersecurity, risk management, and technical implementation, with responsibilities that include system assessments, vulnerability evaluations, and compliance documentation.

Responsibilities

• Process and track user account forms and required training for privileged and non-privileged accounts.
• Assess systems and networks within a virtual environment to identify deviations from acceptable configurations.
• Conduct passive evaluations such as compliance audits and active evaluations like vulnerability assessments.
• Perform Security Technical Implementation Guide (STIG) assessments and hardening for Windows and RHEL systems.
• Develop test plans for STIG checks and document expected outcomes.
• Update Risk Management Framework (RMF) documentation to track and remediate non-compliant systems.
• Establish program control processes for risk mitigation and system assessment.
• Support process analysis, coordination, and compliance documentation for cybersecurity.
• Assist in implementing government policies and recommend process tailoring.
• Perform analyses to validate cybersecurity controls and recommend safeguards.
• Support program test milestones and prepare required artifacts for authorization.
• Maintain the Plan of Action and Milestones (POA&M) for Assessment and Authorization activities.
• Review program audits and monitor corrective actions until closure.
• Coordinate across the program to address deficiencies during RMF assessments.

Requirements

• Active Top Secret clearance is required to start.
• Bachelor's Degree in a STEM discipline and 5 years of related experience, or a Master's degree and 3 years of experience, or a PhD and 1 year of experience, or 9 years of related experience in lieu of a degree.
• DoD 8140 certification at IAT Level II / IAM - Level I or higher is required.
• Security engineering skills with knowledge of cybersecurity technology and DoD/Federal cybersecurity policy.
• Understanding of Risk Management Framework (RMF) Cybersecurity Lifecycle.

Nice-to-haves

• Windows and Red Hat Enterprise Linux (RHEL) system administration skills.
• Previous experience in a virtual environment.
• Experience with dockers and containers.
• Administering ACAS and ESS (formerly HBSS).
• Experience with ConfigOS.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401k
• Paid holidays
• Paid time off
• Professional development opportunities