Principal Cybersecurity Analyst

$114,900 - $172,300/Yr

Northrop Grumman - Roy, UT

Full-time - Principal

Roy, UT

5,001-10,000 employees

Computer and Electronic Product Manufacturing

About the position

The Principal Cybersecurity Analyst at Northrop Grumman is responsible for ensuring compliance with security requirements and regulations by developing, submitting, and maintaining Authorization to Operate (ATO) packages. This role involves collaboration with various teams to gather system artifacts for security compliance verification and establishing program control processes to mitigate risks. The analyst will also support security testing and evaluation, document results, and conduct audits to ensure all actions are closed. This position is critical in maintaining the security posture of the organization and requires a strong understanding of cybersecurity practices and technologies.

Responsibilities

• Develop, submit, and maintain Authorization to Operate (ATO) packages for DCSA compliance.
• Work within the eMASS system to manage and track ATO packages, coordinating with various stakeholders.
• Collaborate with teams to gather system artifacts for security compliance verification.
• Establish program control processes to mitigate risks and support certification and accreditation of systems.
• Assist in implementing government policy and make recommendations on process tailoring.
• Perform analyses to validate established security requirements and recommend additional safeguards.
• Support formal Security Test and Evaluation (ST&E) through pre-test preparations and analysis of results.
• Document results of Assessment and Authorization activities and prepare system Security Plans.
• Conduct complete reviews of system audits and monitor corrective actions.

Requirements

• 5 years of relevant experience with a Bachelor's degree, 3 years with a Master's degree, or 1 year with a PhD.
• Current DoD Secret level security clearance.
• Current DoD 8570 IAM Level II security certification (e.g., CGRC, CISSP).
• Experience developing, submitting, and maintaining ATO packages and updating artifacts within eMASS.
• Experience performing vulnerability scans using Tenable & Splunk.
• Demonstrated expert knowledge of cybersecurity practices and network technologies.
• Strong attention to detail and interpersonal skills.
• Proficient with Microsoft Office Tools (Excel, Word, PowerPoint).

Nice-to-haves

• Working knowledge of ATO packages and the eMASS system.
• Experience with NIST RMF.
• Understanding of auditing, vulnerability scanning/remediation, and Risk Management Framework.
• Experience managing a POA&M and identifying handling plans for vulnerabilities.
• Strong verbal and written communication skills for documentation.

Benefits

• 401(k)
• Dental insurance
• Disability insurance
• Employee assistance program
• Employee discount
• Health insurance
• Life insurance
• Paid Time Off
• Health & Wellness Resources
• Educational Assistance