Staff Cybersecurity Analyst / Information Systems Security Engineer (ISSE)

Northrop Grumman is seeking a Staff Cybersecurity Analyst / Information Systems Security Engineer (ISSE) to support a mission critical network environment and conduct Assessment and Authorization (A&A) accreditation activities for customer products. This role focuses on system and network security assessments, risk mitigation, Security Test and Evaluation (ST&E) support, and maintenance of Certification and Accreditation documentation, including POA&M.

Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy through passive compliance audits and active vulnerability assessments.
• Establish and support strict program control processes to ensure risk mitigation and readiness for certification and accreditation, including analysis, coordination, security certification test support, security documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
• Support implementation of required government policy, including NISPOM and DCID 6-3, while recommending process tailoring and participating in documented process activities.
• Conduct analyses to validate established security requirements and recommend additional requirements and safeguards.
• Support formal Security Test and Evaluation (ST&E) activities required by government accrediting authorities, including pre-test preparation, test participation, results analysis, and preparation of required reports.
• Document Certification and Accreditation outcomes and related technical or coordination activities, including development of system Security Plans and updates to the Plan of Actions and Milestones (POA&M).
• Periodically review each system’s audits and monitor corrective actions until closure.

Required Qualifications

• Active TS/SCI with Polygraph required to be considered and required to start.
• Experience aligned to education level: 12 years with a Bachelor’s degree; 10 years with a Master’s degree; 8 years with a PhD; or 16 years with a High School diploma.
• Experience reviewing technical security assessments for computing environments that identify vulnerabilities or non-compliance.
• Experience implementing the Risk Management Framework Process (RMF) and the ability to support and document certification and accreditation artifacts.
• Experience supporting the A&A process for system accreditation.
• Familiarity with RMF, including accrediting a system through it and nuances involved in application.
• Familiarity with NIST 800-53 rev. 4 (NIST800.53rev4), CNSS-1253, National Security Memorandum 8 (NSM-8), and Zero Trust Architecture/Networking (ZTA/N) high-level concepts and possible implementations.
• Familiarity with both initial accreditation and continuous monitoring tasks, with willingness to adapt to rapidly changing toolsets and controls requirements.
• Familiarity with network monitoring and vulnerability detection tools such as Nessus, Rapid7, Splunk, and Xacta.
• Strong competency with Microsoft Office suite products, including Excel, PowerPoint, and Word.

Technologies

• Risk Management Framework (RMF)
• NIST800.53rev4
• CNSS-1253
• National Security Memorandum 8 (NSM-8)
• Zero Trust Architecture/Networking (ZTA/N)
• Nessus
• Rapid7
• Splunk
• Xacta
• Microsoft Office (Excel, PowerPoint, Word)
• Microsoft Windows
• Enterprise Linux variants
• AWS
• Microsoft Azure

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and allow employees to share in company results
• Long Term Incentives may be available for employees in Vice President or Director positions

Travel

Yes, 10% of the time.

Clearance and Citizenship

• Clearance required for start: Yes
• Clearance type: Polygraph
• U.S. citizenship requirement: U.S. Citizenship is required for positions with a government clearance and certain other restricted positions.

Location

Chantilly, VA (onsite)

Salary

USD 177,000 - 265,600 per year (primary level salary range).

Additional Information

• Relocation assistance: No relocation assistance available
• Preferred qualifications: CISSP, CASP, or other information technology security related certifications; experience using Rapid7 or Tenable Nessus applications; background in Technical Writing or Instructional Systems Design; privileged/power-user level of knowledge in at least one of Microsoft Windows or Enterprise Linux variants; cloud computing infrastructure experience such as AWS or Microsoft Azure.
• Application period: Estimated 20 days from the job posting date, with timeline potentially shortened or extended based on business needs and candidate availability.