Principal Cybersecurity Analyst

$97,500 - $146,300/Yr

Northrop Grumman - Schriever Air Force Base, CO

Full-time - Senior

Schriever Air Force Base, CO

Computer and Electronic Product Manufacturing

About the position

The Principal Cybersecurity Analyst at Northrop Grumman will support the Specialized Warfighter Development Contract (SWDC) team at Schriever AFB, Colorado. This role involves performing assessments of systems and networks to ensure compliance with security policies and configurations. The analyst will engage in both passive and active evaluations, including vulnerability assessments, to identify deviations from acceptable standards. The position requires a strong understanding of cybersecurity policies and the ability to implement government policies effectively.

Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave.
• Identify deviations from acceptable configurations, enclave policy, or local policy through passive evaluations and active evaluations.
• Establish strict program control processes to ensure mitigation of risks and support certification and accreditation of systems.
• Assist in the implementation of required government policies and make recommendations on process tailoring.
• Participate in and document process activities related to security certification tests and security documentation.
• Perform analyses to validate established security requirements and recommend additional safeguards.
• Support formal Security Test and Evaluation (ST&E) required by government accrediting authorities.
• Document results of Certification and Accreditation activities and prepare system Security Plans.
• Conduct periodic reviews of system audits and monitor corrective actions until closure.

Requirements

• Bachelor's Degree in a STEM discipline and 5 years of related experience, or a Master's degree and 3 years of experience, or a PhD and 1 year of experience, or 9 years of related experience in lieu of a degree.
• An active Top Secret clearance is required to start.
• Security engineering skills with knowledge of cybersecurity technology and DoD/Federal cybersecurity policy.
• Understanding and utilization of Enterprise Mission Assurance Support Service (eMASS).
• Knowledge of Risk Management Framework (RMF) Cybersecurity Lifecycle.

Nice-to-haves

• Experience with design, implementation, compliance, and testing of cybersecurity controls.
• Excellent communication, negotiation, and interpersonal skills.
• Working knowledge of RHEL OS and best practices related to security.
• Ability to deploy and configure ACAS products - Tenable Security Center and Nessus.
• Knowledge of McAfee products - ESS, ePO and associated endpoint products.
• Knowledge of Splunk or another SIEM.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401k plan
• Paid holidays
• Paid time off (PTO)