Principal Cybersecurity Analyst / Sr. Principal Cybersecurity Analyst

Northrop Grumman is hiring a Principal Cybersecurity Analyst or Sr. Principal Cybersecurity Analyst to support mission-critical network infrastructure in Chantilly, VA. In this onsite role, you will help perform system and network assessments, contribute to Security Test and Evaluation (ST&E), and maintain Certification and Accreditation (A&A) activities aligned to the Risk Management Framework (RMF) for customer products.

Role overview

You will support program control processes that focus on risk mitigation, including implementation of applicable government policy (such as NISPOM and DCID 6-3). The work also includes validating security requirements and recommending safeguards, documenting A&A results, and monitoring corrective actions until closure.

Responsibilities

• Assess systems and networks within the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
• Establish strict program control processes to support risk mitigation and obtaining certification and accreditation for systems.
• Assist with implementation of required government policy, including recommendations on process tailoring and participation in documented process activities.
• Analyze security requirements to validate established controls and recommend additional security requirements and safeguards.
• Support formal Security Test and Evaluation (ST&E) required by government accrediting authorities, including pre-test preparations, test participation, results analysis, and report preparation.
• Document Certification and Accreditation results and technical or coordination activity, including preparation of system Security Plans and updates to the Plan of Actions and Milestones (POA&M).
• Periodically review system audit results and monitor corrective actions until all actions are closed.

Requirements

• Active TS/SCI with Polygraph required to be considered and required to start.
• Experience reviewing technical security assessments of computing environments to identify vulnerabilities or non-compliance.
• Experience implementing the Risk Management Framework (RMF) Process and the ability to support and document certification and accreditation artifacts.
• Experience supporting the A&A process for system accreditation.
• Hands-on experience capturing, inspecting, and analyzing network packets using tools such as Wireshark and SolarWinds.
• Proficiency querying logs, building dashboards, and investigating alerts in SIEM platforms such as Splunk and ELK Stack.
• Solid understanding of the OSI model, TCP/IP networking, DNS, HTTP/S, VPNs, and firewall rule sets.
• Familiarity with RMF and nuances in applying RMF.
• Familiarity with NIST 800-53 rev. 4, CNSS-1253, National Security Memorandum 8 (NSM-8), and Zero Trust Architecture/Networking (ZTA/N) high-level concepts and possible implementations.
• Familiarity with initial accreditation activities and continuous monitoring, with willingness to adapt to changing toolsets and control requirements.
• Familiarity with network monitoring and vulnerability detection tools such as Nessus, Rapid7, Splunk, and Xacta, plus strong competency with Microsoft Office (Excel, PowerPoint, and Word).

Preferred qualifications

• CISSP, CASP, or other information technology security related certifications.
• Experience using Rapid7 or Tenable Nessus applications.
• Background in Technical Writing or Instructional Systems Design would be helpful.
• Privileged or power-user level knowledge is strongly suggested in at least one of: Microsoft Windows, Enterprise Linux variants.
• Cloud computing infrastructure experience such as AWS or Microsoft Azure.

Technologies

• NIST 800-53 rev. 4, CNSS-1253, NISPOM, DCID 6-3, National Security Memorandum 8 (NSM-8), Zero Trust Architecture/Networking (ZTA/N), Risk Management Framework (RMF), Assessment and Authorization (A&A), Security Test and Evaluation (ST&E), POA&M
• Nessus, Rapid7, Splunk, Xacta, Wireshark, SolarWinds
• SIEM platforms, ELK Stack
• Microsoft Office (Excel, PowerPoint, Word), OSI model, TCP/IP networking, DNS, HTTP/S, VPNs, firewall rule sets
• Microsoft Windows, Enterprise Linux variants, AWS, Microsoft Azure

Compensation, location, and travel

• Location: Chantilly, VA (onsite)
• Salary: USD 114,000 - 213,400 per year
• Primary level range: $114,000.00 - $171,000.00
• Secondary level range: $142,200.00 - $213,400.00
• Travel: Yes, 10% of the Time
• Relocation assistance: No relocation assistance available

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position, employees may be eligible for overtime
• Depending on the position, employees may be eligible for shift differential
• Depending on the position, employees may be eligible for a discretionary bonus in addition to base pay
• Annual bonuses
• Employees in Vice President or Director positions may be eligible for Long Term Incentives

Application window and eligibility notes

• Application period is estimated to be 20 days from the job posting date.
• Equal Opportunity Employer: Northrop Grumman makes decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
• U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.