Principal Classified Cybersecurity Analyst

Join Northrop Grumman’s CIDO Classified Solutions team supporting information systems lifecycle activities in a mission-focused environment. This onsite, full-time role in Dulles, VA offers a 9/80 work schedule, comprehensive benefits and healthcare, a 401k matching program, paid time off, and opportunities to expand skills through learning across a wide variety of projects and customers. Work is classified in nature, so the position does not offer virtual or telecommute options.

Location: Dulles, VA (onsite)
Travel: 10% of the time
Pay range: USD 114,000 - 171,000 per yearly

What you’ll do

• Conduct system audits and continuous monitoring across all security controls, configurations, and operational processes to evaluate the security posture of information systems.
• Assess systems and networks within an enclave or networking environment, identifying deviations from acceptable configurations, enclave policy, or local policy.
• Perform analyses to validate established security requirements and recommend additional requirements and safeguards.
• Support implementation of required government policy, including recommendations on process tailoring, and participate in and document process activities.
• Establish program control processes to mitigate risk and support Assessment and Authorization (A&A) of systems. This includes process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Support Security Test and Evaluation (ST&E) activities required by government accrediting authorities, including pre-test preparation, test participation, result analysis, and report preparation.
• Document A&A results and related technical or coordination activities, and prepare Risk Management Framework body of evidence.

Tools and frameworks you’ll work with

• ACAS, Nessus, Splunk, Trellix, SCAP
• NIST, JSIG, DAAG
• SSPs, POA&Ms, SCTMs

Required qualifications

• Master’s degree with 3 years of IT experience; OR Bachelor’s degree with 5 years of IT experience; OR Associate degree with 7 years of IT experience; OR High School Diploma/GED with 9 years of IT experience.
• Must meet U.S. Government 8140 requirements for a Principal Cybersecurity Analyst, including an IAM level II equivalent (or higher) security certification (examples: CAP / CGRC, CASP+/SecurityX, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP).
• Current U.S. Government Top Secret clearance (minimum), including a closed investigation date completed within the last 6 years, or enrollment in the U.S. Government Continuous Evaluation (CE) Program.
• Ability to obtain and maintain access to Special Programs (SAP/SAR) as a condition of continued employment.

Benefits

• Flexible work arrangements
• Phenomenal learning opportunities
• Exposure to a wide variety of projects and customers
• Friendly team environment
• Exceptional benefits/healthcare
• 9/80 work schedule
• 401k matching program
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and share in company results
• Long Term Incentives eligibility for employees in Vice President or Director positions
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business

Additional details

• Clearance required for start: Yes
• Clearance type: Top Secret
• Relocation assistance: No
• Note: Due to the classified nature of the work, this position does not offer any virtual or telecommute working options. Apply only if you are willing to work on-site.
• Application period: Estimated 20 days from the job posting date (may be shortened or extended based on business needs and candidate availability).

Preferred qualifications

• Bachelor’s degree in Cybersecurity or related field
• Security+ CE
• Experience in cybersecurity compliance, for example Assessment & Authorization under RMF
• Top Secret, SAP/SAR access, SCI access, and/or a Polygraph
• Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP
• Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs