Classified Cybersecurity Analyst

Northrop Grumman is seeking a Classified Cybersecurity Analyst to support information system lifecycle work for the CIDO Classified Solutions team. This is an on-site, full-time role in Aurora, CO, focused on activities tied to audits, continuous monitoring, assessments, and documentation used for Assessment and Authorization (A&A) and Risk Management Framework (RMF) evidence within classified program environments.

What you will do

• Conduct system audits and continuous monitoring across security controls, configurations, and operational processes to evaluate the security posture of information systems.
• Perform assessments of systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
• Analyze security requirements to validate established needs and recommend additional requirements and safeguards.
• Support implementation of required government policy, including recommendations for process tailoring, and participate in and document process activities.
• Work within program control processes to mitigate risk and support Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging-technology research, inspections, and periodic audits.
• Support formal Security Test and Evaluation (ST&E) efforts for government accrediting authorities, including pre-test preparations, test participation, analysis of results, and preparation of required reports.
• Document A&A results and related technical and coordination activities, and prepare the Risk Management Framework body of evidence.

Minimum qualifications

• Master’s degree with 0 years of technical experience; OR Bachelor’s degree with 2 years; OR Associate’s degree with 4 years; OR High School Diploma/GED with 6 years of technical experience.
• Meet the U.S. Government 8140 requirements (8570 equivalent) for a Classified Cybersecurity Analyst – IAM level I certification or higher (examples include Security+, CND, Cloud+, CAP or CGRC, CASP+ or CompTIA Security X, CISSP-Associate, CISM, CISSP, GSLC, CCISO).
• Hold a current U.S. Government Top Secret security clearance (at a minimum), including SCI access level eligibility based on a closed investigation date completed within the last 6 years OR be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
• Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Relevant tools and frameworks

• Security and assessment tools: ACAS, Nessus, Splunk, Trellix, SCAP
• Standards and guidance: NIST, JSIG, DAAG
• Program and documentation artifacts: SSPs, POA&Ms, SCTMs
• Certifications listed in the role: Security+, CND, Cloud+, CAP, CGRC, CASP+, CompTIA Security X, CISSP-Associate, CISM, CISSP, GSLC, CCISO

Compensation and schedule

• Salary range: USD 91,800 - 137,600 per year
• Work schedule: 9/80 work schedule
• Travel: Yes, 10% of the time

Benefits

• Exceptional benefits/healthcare
• 401k matching program
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business

Clearance and work location

• Clearance required for start: Yes
• Clearance type: SCI
• Location: Aurora, CO (onsite)
• Remote work: Not available due to the classified nature of the work
• Relocation assistance: No relocation assistance available

Application timing

The application period is estimated to be 20 days from the job posting date, though the timeline may be shortened or extended based on business needs and availability of qualified candidates.