Principal Cybersecurity Analyst
Job Description
Northrop Grumman is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities for its CIDO Classified Solutions team. This role requires full-time, on-site work in Sunnyvale, CA and includes audits, continuous monitoring, assessments, A&A and RMF evidence development, and support for Security Test and Evaluation (ST&E) activities for government accrediting authorities.
Location and Work Schedule
- Location: Sunnyvale, CA (onsite)
- Work type: Full-time onsite; no virtual or telecommute options due to classified work
- Travel: Yes, 10% of the time
- Schedule: 9/80 work schedule
Salary
- Primary salary range: USD 114,000 - 171,000 per year
- Salary note: Northrop Grumman considers scope and responsibilities, candidate experience and education, skills, and current market conditions when determining base salary offers
Responsibilities
- Conduct system audits and continuous monitoring activities across all security controls, configurations, and operational processes to evaluate the security posture of information systems.
- Perform assessments of systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
- Carry out analyses to validate established security requirements and recommend additional security requirements and safeguards.
- Assist with implementation of required government policy, including recommendations on process tailoring, and participation in and documentation of process activities.
- Establish strict program control processes to support risk mitigation and the Assessment and Authorization (A&A) of systems, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
- Support formal Security Test and Evaluation (ST&E) activities required by government accrediting authorities, including pre-test preparations, test participation, analysis of test results, and preparation of required reports.
- Document results of A&A activities and technical or coordination activities, and prepare the Risk Management Framework (RMF) body of evidence.
Required Qualifications
- Education and experience: Master’s degree with 3 years of relevant experience; or Bachelor’s degree with 5 years of relevant experience; or Associate’s degree with 7 years of relevant experience; High School Diploma or equivalent with 9 years of relevant experience may be considered in lieu of a completed degree.
- Security clearance: Current US Government Top Secret level security clearance (at a minimum), including a closed investigation date completed within the last 6 years, or enrollment in the US Government Continuous Evaluation Program (CEP). Clearance must be maintained as a condition of continued employment.
- Additional clearance: Ability to obtain and maintain a Special Access Program (SAP/SAR) clearance as a condition of continued employment.
- Certification: Current US Government 8570 IAM level II equivalent security certification (or higher), including options such as CAP/CGRC, CASP+/SecurityX, CISM, CISSP (or Associate), GSLC, CCISO, or HCISPP.
Preferred Qualifications
- Bachelor’s degree in Information Systems or Cybersecurity.
- 5+ years of experience with Assessment and Authorization of classified systems and the Risk Management Framework.
- Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, DIACAP, NISPOM, system audits, vulnerability scanning, and RMF package development.
Technologies
- ACAS
- NESSUS
- Splunk
- SCAP
- POA&Ms
- NIST
- DIACAP
- NISPOM
- Risk Management Framework (RMF)
Benefits
- Flexible work arrangements
- Phenomenal learning opportunities
- Exposure to a wide variety of projects and customers
- Friendly team environment
- Exceptional benefits/healthcare
- 401k matching program
- Eligible for overtime, shift differential, and a discretionary bonus in addition to base pay (depending on position)
- Annual bonuses
- Long Term Incentives (VP/Director positions, depending on position)
- Health insurance coverage
- Life and disability insurance
- Savings plan
- Company paid holidays
- Paid time off (PTO) for vacation and/or personal business
Relocation Assistance
Relocation assistance may be available.
Clearance, Eligibility, and Application Notes
- Clearance required for start: Yes
- Clearance type: Top Secret
- U.S. citizenship: U.S. citizenship is required for positions with a government clearance and certain other restricted positions
- Classified work constraint: Due to the classified nature of the work, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply only if they are willing to work on-site.
Estimated Application Period
The application period is estimated to be 20 days from the job posting date. This timeline may be shortened or extended depending on business needs and the availability of qualified candidates.