Principal Classified Cybersecurity Analyst

Northrop Grumman is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities for classified environments. This role is based on-site in Redondo Beach, CA and focuses on audits, monitoring, assessments, and A&A/ST&E support to help systems maintain an appropriate security posture.

In this position, you will help validate security requirements, identify configuration and policy deviations, and contribute to the evidence and documentation needed for the Assessment and Authorization (A&A) process and the Risk Management Framework (RMF). The work is classified in nature and requires the ability to maintain the required clearances and access.

What You’ll Do

• Conduct system audits and continuous monitoring across security controls, configurations, and operational processes to evaluate information system security posture.
• Assess systems and networks within a networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
• Perform analysis to validate established security requirements, and recommend additional security requirements and safeguards.
• Support implementation of required government policy, including recommendations on process tailoring and participation in and documentation of process activities.
• Establish program control processes to mitigate risks and support A&A, including process support, security certification testing support, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Support Security Test and Evaluation (ST&E) required by government accrediting authorities, including pre-test preparation, participation, result analysis, and report preparation.
• Document A&A activity results and prepare the RMF body of evidence based on technical and coordination activities.

Required Qualifications

• Master’s degree with 3 years of relevant experience; or Bachelor’s degree with 5 years; or Associate’s degree with 7 years; or High School diploma or equivalent with 9 years of relevant experience.
• CISSP security certification (or an equivalent) aligned to US Government 8140 standards.
• Current US Government Secret security clearance (minimum requirement) to be considered.
• Ability to obtain and maintain access to Special Programs as a condition of continued employment.

Technologies and Frameworks

• CISSP
• ACAS, Nessus, Splunk, Trellix
• SCAP
• NIST, JSIG, DAAG
• RMF
• SSPs, POA&Ms, SCTMs

Salary and Work Details

• Location: Redondo Beach, CA (on-site)
• Work schedule: On-site full-time
• Travel: Yes, 10% of the time
• Salary range: USD 114,000 - 171,000 per year

Clearance and Citizenship

• Clearance required for start: Yes
• Clearance type: Secret
• Citizenship: U.S. Citizenship is required for roles with a government clearance and certain other restricted positions.

Benefits

• Flexible work arrangements
• Exceptional benefits/healthcare
• 9/80 work schedule
• 401k matching program
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Eligible for overtime, shift differential, and a discretionary bonus in addition to base pay (depending on position)
• Annual bonuses designed to reward individual contributions and allow employees to share in company results
• Long Term Incentives for employees in Vice President or Director positions (depending on position)
• Phenomenal learning opportunities
• Exposure to a wide variety of projects and customers
• Friendly team environment

Additional Information

• Relocation assistance: Relocation assistance may be available
• On-site requirement: Due to the classified nature of the work, this position does not offer any virtual or telecommute working options; applicants are encouraged to apply only if they are willing to work on-site.
• Preferred qualifications: Bachelor’s degree in Cybersecurity or related field; experience in cybersecurity compliance (ex. Assessment & Authorization under RMF); knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP; knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs
• Application period: Estimated to be 20 days from the job posting date