Nist Sp 800 171

Nist Sp 800 171 Cybersecurity Jobs

6 jobs found

3d ago

Sr. Principal Classified Cybersecurity Analyst

Northrop Grumman Baltimore, MD

Baltimore, MD

3d ago

$136k - $204k/yr Full time Manager Senior Classification Guide

Apply Now

Job Description

Northrop Grumman seeks a Sr Principal Classified Cybersecurity Analyst to oversee cybersecurity for assigned information systems, lead A&A and ST&E, ensure compliance, onsite in Baltimore, MD.

Responsibilities

Oversee the cybersecurity program for all assigned information systems and execute related cybersecurity tasks.
Lead ongoing audits and continuous monitoring of security controls and configurations to strengthen the information system security posture.
Assess systems and networks within the enclave to identify deviations from approved configurations and policies.
Analyze security requirements and propose additional safeguards and controls.
Drive government policy implementation, advise on process tailoring, and document related activities.
Establish and manage rigorous program controls to support system Assessment and Authorization (A&A), including process support, analysis, coordination, testing, documentation, investigations, procurement considerations, emerging technology research, inspections, and audits.
Direct the formal Security Test and Evaluation (ST&E) process required by accrediting authorities, including pre-test preparations, participation, results analysis, and reporting.
Document A&A and inspection outcomes, actions taken, and collaborate with the security team to submit responses to the appropriate cognizant authority.
Prepare and submit A&A documentation (System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, Plan of Action and Milestones, etc.) for review and approval.

Requirements

Education and experience combinations: Master’s degree with 6+ years, Bachelor’s with 8+ years, Associate’s with 10+ years; High School Diploma or GED with 12+ years may be considered in lieu of a completed degree.
Must meet U.S. Government 8140 requirements for a Sr Classified Cybersecurity Analyst – IAM III.
Current U.S. Government Top Secret clearance (or Continuous Evaluation program enrollment) with a closed investigation date within the last 6 years; clearance must be maintained.
Ability to obtain and maintain access to Special Access Programs as a condition of employment.

Technologies

ACAS
Nessus
Splunk
Trellix
SCAP
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs

Compensation

Salary: USD 135,800 - 203,600 per year

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Collaborative team environment
Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO)
9/80 work schedule
401(k) matching program

Preferred Qualifications

Bachelor’s degree in Cybersecurity or a related field
Experience in cybersecurity compliance, such as RMF A&A
Knowledge of security tools including ACAS, Nessus, Splunk, Trellix, and SCAP
Familiarity with security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs

View full job page →

8d ago

IT Security Engineer

Arkwin Industries Bethpage, NY

Bethpage, NY

8d ago

$75k - $100k/yr Full time Cybersecurity Tools Endpoint Security Engineer

Apply Now

Job Description

Arkwin Industries is seeking an IT Security Engineer for an onsite role in Bethpage, NY. The position focuses on identifying, remediating, and tracking security vulnerabilities across the organization while delivering day-to-day IT support. With a emphasis on sustaining CMMC compliance and corporate cybersecurity standards, the role is well-suited for candidates with defense or aerospace experience, and the salary ranges from $75,000 to $100,000 per year.

Responsibilities

Track security alerts from internal tools and trusted external feeds, including CISA advisories, vendor notices, and threat intelligence, and assess risk
Perform vulnerability scanning, evaluation, and risk analysis using Tanium
Assist with patching and updates after proper testing for compatibility
Prioritize and remediate vulnerabilities based on risk
Oversee enterprise patch management across all endpoints using Tanium and ManageEngine Endpoint Central
Configure and maintain system settings aligned with NIST SP 800-171 security controls
Support CMMC Level 2 compliance through audit preparation, documentation, and evidence collection
Monitor and report on vulnerability posture, remediation timelines, and patch compliance across the environment
Maintain thorough documentation for system configurations, imaging standards, patch cycles, and compliance controls

Requirements

Bachelor's degree in IT, Computer Science, or a related field, or equivalent practical experience
Minimum of 3 years in IT support or help desk with hands-on vulnerability remediation and patching
Strong troubleshooting across Windows, networking, and endpoint security with focus on vulnerability management and patching
Excellent communication, documentation, and problem-solving skills
Authorized to work in the United States
Eligible for required U.S. government authorizations

Technologies

Tanium
ManageEngine Endpoint Central
CrowdStrike
Bitsight
Windows
NIST SP 800-171

View full job page →

19d ago

IT Spec (Infosec), GS-2210-14, FPL 14 (DH) (Open-Continuous)

US Federal Student Aid San Francisco, CA

San Francisco, CA

19d ago

$128k - $197k/yr Full time Senior Data Security Enterprise Risk

Apply Now

Job Description

US Federal Student Aid offers a comprehensive benefits package, a family‑friendly work environment, paid time off for parent/teacher conferences and health screenings, and opportunities for professional growth. This on‑site role in San Francisco supports a mission to modernize systems serving more than 17 million students and over $120 billion in financial aid each year. In addition to a competitive salary, eligible employees may access relocation and recruitment incentives, student loan repayment programs, and flexible work arrangements that help balance career and personal commitments.

Overview

This position is with the U.S. Department of Education, Federal Student Aid. The role focuses on enterprise cybersecurity program oversight across the FSA environment, with emphasis on modern federal security standards and risk management practices to safeguard Federal Tax Information and Controlled Unclassified Information.

Responsibilities

Lead enterprise cybersecurity program oversight across the FSA environment, ensuring stakeholder security requirements are implemented across Zero Trust, segmented, and cloud architectures; advise senior leadership on security posture.
Manage enterprise safeguards and compliance programs with expertise in IRS Publication 1075, GLBA Safeguards Rule, NIST SP 800-53, and NIST SP 800-171; supervise implementation and continuous monitoring of controls for systems processing FTI and CUI; drive the full NIST SP 800-171 compliance lifecycle for institutions of higher education.
Direct Authority to Operate and Operational Security Assessment activities; conduct RMF-aligned risk assessments, impact analyses, control evaluations, and continuous monitoring; serve as technical authority on enterprise risk posture with strong communication skills.
Oversee incident response and compliance case management, including triage, investigations, documentation, corrective action tracking, and regulatory reporting; provide senior advisory support during high risk events.
Drive enterprise risk management artifacts, support governance committees, deliver training and cybersecurity communications; manage the Enterprise Risk Management tool and user support.

Technologies

FISMA, FedRAMP, DHS BODs
Zero Trust, NIST SP 800-53, NIST SP 800-171
IRS Publication 1075, GLBA Safeguards Rule
FTI, CUI, RMF, ATO, OSA, ERM

Requirements

Relocation will not be paid
One year probationary period may apply
Males 18 and over must be registered with the Selective Service
U.S. Citizenship required
Background investigation and fingerprint check required
Drug testing position
Probation or trial period may be required to evaluate fitness for the public interest
Must meet all qualification requirements within 30 days of the closing date

Specialized Experience for GS-14

One year of experience equivalent to at least GS-13 performing two of the following duties:

Managing cybersecurity compliance programs (NIST SP 800-171, GLBA, FTI) in complex enterprise or higher education environments, coordinating controls, assessments, and audit readiness
Leading federal or private cybersecurity audits, creating corrective action plans, interpreting findings, and coordinating remediation
Developing and executing enterprise cybersecurity training, governance artifacts (risk registers, dashboards), and ERM/committee reporting

Basic Experience Requirements

Attention to Detail
Customer Service
Decision Making
Information Management
Interpersonal Skills
Oral Communication
Problem Solving
Teamwork
Technical Competence

Knowledge, Skills, and Abilities

Knowledge of enterprise security programs, risk mitigation, vulnerability management, and executive communication
Ability to interpret federal cybersecurity regulations and implement controls for FTI/CUI environments
RMF/ATO, continuous monitoring, and enterprise risk analysis
Incident handling, regulatory reporting, stakeholder coordination, escalation leadership
ERM governance, training development, and tooling administration

Education

Education cannot be substituted for experience for this position and grade level.

Qualifications

Preferred certifications: CISSP or CISA

Open to

The public: U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Career transition (CTAP, ICTAP, RPL): Federal employees eligible for priority consideration

Agency clarification

This announcement is open to all U.S. Citizens and may be filled through Direct Hire Authority for IT Specialist positions. All applicants who meet the qualifications will be forwarded for consideration. Category Rating, Veterans Preference, Schedule A and traditional rating/ranking do not apply to this vacancy.

Additional information

Veterans Career Counseling available by emailing careers@ed.gov
Student Loan Default verification required; arrangements must be made prior to offer if in default
Declaration for Federal Employment (OF-306) required to determine suitability; pre-appointment investigation/background check
Essential for federal closures: this position is considered essential
Financial disclosure not required; bargaining unit not included
Selections may occur from multiple sources and additional selections may occur within 90 days

View full job page →

29d ago

Senior Cybersecurity GRC Analyst

The Norland Group San Jose, CA

San Jose, CA

29d ago

$85 - $95/hr Full time Senior Cmmc Controls Enterprise Risk

Apply Now

Job Description

The Norland Group seeks a Senior Cybersecurity GRC Analyst to lead governance, risk, and compliance initiatives across the organization. The role encompasses audits, risk assessments, identity and access governance, third-party risk management, and policy and process engineering. This on-site position is based in San Jose, CA.

Responsibilities

Develop and manage the overarching Compliance Program to align with industry standards such as SOC 2, NIST 800-171, ISO 27001, and NIST 800-53.
Collaborate with IT Security Operations to ensure security controls are properly designed, implemented, and operating effectively.
Lead the end to end cybersecurity audit process, including preparation of response documentation and execution of remediation plans.
Produce and distribute high level information security reports and compliance dashboards for key stakeholders.
Direct comprehensive cybersecurity risk assessments across the enterprise, identifying vulnerabilities and recommending prioritized mitigations.
Develop and maintain the Corporate Risk Register, tracking risk acceptance, treatment plans, and residual risk.
Perform quantitative and qualitative risk analysis to inform executive decision making and resource allocation.
Oversee and collaborate with stakeholders to execute quarterly user access reviews and monthly user activity monitoring.
Ensure timely completion, technical accuracy, and rigorous documentation of all access reviews to meet audit requirements.
Analyze access trends and over privileged accounts to recommend Least Privilege improvements and RBAC refinements.
Own and maintain Third-Party Risk Management evaluation practices, ensuring vendors are vetted against corporate security standards to mitigate supply chain risk.
Author, maintain, and update information security policies and Standard Operating Procedures to align with evolving industry standards.
Manage and govern Change Management processes to maintain security stability and compliance during technical transitions.

Requirements

Experience: Minimum 10 years of experience managing cybersecurity compliance programs from inception to completion.
Technical Expertise: Hands on experience with SOC 2 and a deep understanding of IT security controls.
Framework Proficiency: Expert knowledge of ISO 27001, CIS v8.1, NIST 800-53, NIST 800-171, CMMC, and FedRAMP.
Analytical Skills: Strong analytical thinking with the ability to prioritize complex tasks in a fast paced, evolving environment.
Communication: Excellent interpersonal, verbal, and written communication skills, able to work effectively as part of a team or independently.
Security Knowledge: Solid foundation in IT security concepts with emphasis on Security Risk Assessment.
Certifications: CISSP, CISM, or CISA preferred.
Preferred Qualifications: Exceptional ability to tailor complex technical communication for both technical audiences and non technical executive leadership.

Technologies

SOC 2
NIST 800-171
ISO 27001
NIST 800-53
CIS v8.1
CMMC
FedRAMP

Location

Onsite at our San Jose office headquaters, five days a week.

View full job page →

1mo ago

Information System Security Officer, Classified Cybersecurity

Lockheed Martin Cape Canaveral, FL

Cape Canaveral, FL

1mo ago Closed

Full time Manager Cybersecurity Tools DISA STIGs

This position is no longer accepting applications (closed Jul 23, 2026).

Job Description

Competitive pay, comprehensive benefits, flexible schedules, and paid time off are core to Lockheed Martin Space. This onsite Information System Security Officer role supports the FBM program in Cape Canaveral, Florida, overseeing daily cybersecurity operations for classified and unclassified systems.

Responsibilities

Provide technical administration of an information system in line with Lockheed Martin and customer security requirements, primarily governed by RMF.
Monitor, analyze, and respond to network and security events.
Document compliance actions in the approved tracking system or develop a plan of actions and milestones with the ISSM to address non-compliance within the allotted time frame.
Ensure systems are operated, maintained, and disposed of per security policies and the security plan.
Operate and maintain ACAS laptops and servers using Tenable Security Center and Nessus security scanners.
Audit diverse isolated and networked systems using vulnerability scanning and STIG analysis tools.

Requirements

DoD Secret clearance with a current investigation within the last five years and the ability to obtain and maintain a Top Secret clearance.
Knowledge of system hardening through DISA Security Technical Implementation Guides (STIGs).
Familiarity with security scanning tools such as SCAP, Evaluate-STIG, and Tenable.
DoD 8570 IAT II Certification.
Experience in information system auditing.

Technologies

Risk Management Framework (RMF)
DISA Security Technical Implementation Guides (STIGs)
SCAP
Evaluate-STIG
Tenable Security Center
Nessus Security Scanner
ACAS
STIG analysis tools
Windows
Linux/Unix
Networking equipment
NIST SP 800-37 Risk Management Framework
NIST SP 800-53 Security and Privacy Controls
NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

Benefits

Competitive pay
Comprehensive benefits
Flexible schedules
Paid Time Off benefits

Details

Job ID: 731337BR
Date Posted: Jun. 03, 2026
Location: Cape Canaveral, FL (onsite)
Security Clearance: This position requires a government security clearance; US citizenship is required for consideration.
Clearance Level: Top Secret
Expression of Interest: By applying to this job, you are expressing interest in this position and could be considered for other opportunities where similar skills and requirements have been identified. If a match is identified you may be contacted for this and future openings.
Remote Work: Onsite Full-time; work performed at a designated Lockheed Martin facility
Work Schedule: 9x80 every other Friday off
Experience Level: Experienced Professional
Business Unit: SPACE
Relocation: No
Career Area: Cyber Security
Type: Full-Time
Shift: First

View full job page →

1mo ago

Cybersecurity Analyst

THERM-OMEGA-TECH, INC Warminster, PA

Warminster, PA

1mo ago Closed

$105k+/yr Full time Analyst Cloud Platforms Cmmc Level 2

This position is no longer accepting applications (closed Jul 12, 2026).

Job Description

What you get

Location: Warminster, PA (onsite). Salary: USD 105,000 per year. Job type: Full-time, in person.

As a cybersecurity analyst, you will monitor systems, help shape security policy, support regulatory compliance, and collaborate with cross-functional teams to protect information assets and meet obligations.

401(k)
Dental insurance
Health insurance
Health savings account
Life insurance
Paid time off
Referral program
Vision insurance

Responsibilities

Support research and analysis to document, design, implement, evaluate, and test security controls, ensuring compliance with DFARS, CMMC level 2, NIST 800-53, and NIST 800-171.
Aid in organizing tasks to document, design, control, and protect information systems handling sensitive client data under required standards (eg, CUI and ITAR).
Continuously monitor networks and systems for potential threats and perform security assessments.
Investigate security incidents and respond in a timely manner.
Assist in developing and enforcing security policies and procedures.
Provide guidance on security policy, standards, compliance, project-related work, and related functions.
Support compliance audits and regulatory assessments by providing documentation, evidence, and support for cybersecurity controls and practices.
Collaborate with cross-functional teams to ensure security initiatives align with organizational goals.
Communicate security risks, incidents, and mitigation strategies to key stakeholders to strengthen the organization’s cybersecurity posture and regulatory compliance.

Requirements

5+ years of enterprise system administration experience (preferred).
5+ years of experience with federal security baselines (NIST 800-53, 800-171, and CMMC) (preferred).
Technical understanding of cybersecurity domains, including cloud-based technologies and platforms such as Office 365, Azure, and Salesforce.

Technologies

Office 365
Azure
Salesforce

View full job page →

Nist Sp 800 171 Cybersecurity Jobs

Sr. Principal Classified Cybersecurity Analyst

IT Security Engineer

IT Spec (Infosec), GS-2210-14, FPL 14 (DH) (Open-Continuous)

Senior Cybersecurity GRC Analyst

Information System Security Officer, Classified Cybersecurity

Cybersecurity Analyst

Get Nist Sp 800 171 Cybersecurity Jobs alerts