Principal

Principal Cybersecurity Jobs

2 jobs found

15d ago

Principal Cybersecurity Engineer

Information Technology Department Boston, MA

Boston, MA

15d ago

$120k - $180k/yr Full time Cybersecurity Engineer Principal

Apply Now

Job Description

This senior role focuses on designing, deploying, and operating comprehensive security controls across network, endpoints, cloud environments, identity systems, data protection, and security operations to safeguard an asset management financial services organization.

Responsibilities

Design, implement, and sustain security controls across network, endpoint, cloud, and identity domains.
Support and advance a Zero Trust architecture across systems, applications, infrastructure, and access models.
Define and validate security requirements for new systems, applications, platforms, and technology changes.
Integrate security practices into system design, the software development life cycle, and DevSecOps workflows.
Develop and refine detection use cases across SIEM, XDR, and related monitoring tools.
Lead incident response efforts including investigation, containment, eradication, recovery, remediation, and post-incident analysis.
Conduct threat hunting for anomalous activity, adversary behavior, indicators of compromise, and potential incidents.
Improve security operations through automation, orchestration, playbooks, and streamlined response workflows.
Secure AWS, Azure, Microsoft 365, and other cloud platforms through secure control design, configuration, logging, monitoring, and workload protection.
Implement and manage CSPM, cloud workload protection, and cloud security posture capabilities.
Assess cloud architectures, services, integrations, and deployments for security risk.
Strengthen IAM, PAM, authentication, authorization, access governance, least privilege, and identity-based controls.
Support identity-driven Zero Trust initiatives involving access policies, device trust, segmentation, and continuous verification.
Support data classification, data protection, data monitoring, secure handling, and governance of sensitive information.
Enhance data protection capabilities beyond traditional data loss prevention.
Ensure secure data exchange with third parties, vendors, external partners, applications, and business platforms.
Support vulnerability management through risk-based prioritization, remediation guidance, exposure analysis, and coordination with technology owners.
Leverage threat intelligence to improve detection coverage, vulnerability prioritization, response planning, and control effectiveness.
Evaluate emerging threats, attacker techniques, exploitation trends, and security control gaps.
Support cybersecurity compliance related to internal policies, SEC, FINRA, audit requirements, regulatory obligations, and industry frameworks.
Partner with risk, audit, compliance, governance, engineering, infrastructure, cloud, application, and business teams.
Contribute to cybersecurity metrics, leadership reporting, governance documentation, and SIRT activities.
Support vendor management, tool evaluation, process improvement, and continuous enhancement of cybersecurity capabilities.

Requirements

Bachelor enjoyed in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
Minimum of eight years in cybersecurity engineering, security infrastructure, enterprise security operations, or closely related technical roles.
Experience across network, endpoint, cloud, identity, infrastructure security, or security engineering.
Experience in detection engineering, incident response, threat detection, investigations, SIEM, XDR, or related security monitoring tools.
Experience with IAM, PAM, authentication and authorization, access governance, privileged access management, and least-privilege concepts.
Strong knowledge of cybersecurity principles, security architecture, control design, and the NIST CSF.
Experience with the incident response life cycle including triage, investigation, containment, eradication, remediation, recovery, and post-incident review.
Familiarity with networks, servers, operating systems, endpoints, cloud platforms, identity systems, and business applications.
Strong analytical, problem-solving, documentation, collaboration, and communication skills.

Technologies

AWS
Azure
Microsoft 365
SIEM
XDR
CSPM
Cloud workload protection
IAM
PAM
Python
PowerShell
MITRE ATT&CK

Benefits

401(k)
401(k) matching
Dental insurance
Employee assistance program
Employee discount
Flexible schedule
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Parental leave
Professional development assistance
Referral program
Retirement plan
Tution reimbursement
Vision insurance

Principal / Senior Cybersecurity Engineer Preferred Qualifications

CISSP, GIAC, GCIA, GCIH, GCED, or related security certifications.
Cloud security certification or hands-on experience with AWS, Azure, Microsoft 365, or similar cloud environments.
Experience in financial services, banking, capital markets, fintech, insurance, or highly regulated environments.
Knowledge of SEC, FINRA, audit requirements, internal security policies, regulatory expectations, and control frameworks.
Experience with Python, PowerShell, scripting, automation, workflow optimization, or operational tooling.
Knowledge of MITRE ATT&CK, threat frameworks, adversary tactics, and attack techniques.
Experience with Zero Trust, DevSecOps, CSPM, cloud workload protection, threat hunting, vulnerability management, identity security, SIEM, XDR, IAM, PAM, and security operations improvement.
Additional Requirements
- Risk-based decision making.
- Ability to work across cybersecurity, engineering, infrastructure, application, cloud, risk, compliance, audit, and business teams.
- Ability to operate in a fast-paced environment with evolving threats and priorities.
- Commitment to staying current on cybersecurity threats, tools, technologies, frameworks, and industry trends.

Work Location

Location: Boston, MA; Onsite (in person).

View full job page →

1mo ago

Principal/Sr. Principal Cybersecurity Analyst- 18713

Northrop Grumman Clearfield, UT

Clearfield, UT

1mo ago Closed

$98k - $184k/yr Full time Analyst Cybersecurity ISSM

This position is no longer accepting applications (closed Jul 4, 2026).

Job Description

Overview

Northrop Grumman invites qualified cyber professionals to join the Ground Subsystem Support Contract (GSSC) cyber team, based in Clearfield, Utah. This is a dual level role designed to address assessments, certification, and information assurance across weapon system components and networks. The position emphasizes risk-based security practices, documentation, and collaboration to help deliver trustworthy systems while meeting applicable standards and guidance.

Key details for this opportunity include relocation assistance that may be available, no start clearance required, a Top Secret clearance type, and travel up to 10 percent of the time.

Responsibilities

Assess weapon system components and networks to identify deviations from established configurations and policies through passive audits and active vulnerability assessments.
Establish rigorous program controls to mitigate risk and support certification and accreditation, including process support, analysis, coordination, security test activities, security documentation, investigations, software research, hardware integration, inspections of emerging technology, and periodic audits.
Document Assessment and Authorization outcomes and coordinate technical activities, developing System Security Plans and updating Plan of Action and Milestones (POA&M).
Periodically review system audits and monitor corrective actions until all actions are closed.
Provide analysis, design, development, implementation, and security assessments to ensure compliance with NIST SP 800-53, CNSSI 1253, and DoD RMF Knowledge Service guidance.
Apply analytical methods to evaluate the efficiency and effectiveness of Cyber Security implementations.
Develop system and policy documentation required for certification evaluations.
Perform other ISSM/ISSO duties as necessary.
Apply scientific, engineering, and information assurance principles to deliver dependable systems within acceptable risk levels.

Basic Qualifications

Principal Cybersecurity Analyst

Bachelor's degree with 5 years of experience, or 3 years with a Master’s, or 1 year with a PhD; 4 additional years of experience may be considered in lieu of a completed degree.
U.S. Citizen with the ability to obtain and maintain a U.S. Government security clearance (Secret or Top Secret).
Currently meets DoD 8140 ISSM Certification Requirements, or able to meet within 6 months of hire (examples: CAP, CGRC, GSLC, CISSP).
Experience with NIST Cybersecurity Framework, FedRAMP, PCI DSS, or similar cybersecurity frameworks.
Ability to prioritize and execute tasks in a collaborative team environment within schedules and timelines.

Sr. Principal Cybersecurity Analyst

8 years of relevant experience with a Bachelor's degree; 6 years with a Master's; 4 years with a PhD; an additional 4 years of experience may be considered in lieu of a degree.
U.S. Citizen with the ability to obtain and maintain a U.S. Government security clearance (Secret or Top Secret).
Currently meets DoD 8140 ISSM Certification Requirements (examples: CAP, CGRC, GSLC, CISSP).
Experience with NIST Cybersecurity Framework, FedRAMP, PCI DSS, or similar cybersecurity frameworks.
Ability to prioritize and execute tasks in a collaborative team environment within schedules and timelines.

Preferred Qualifications

2 years of ISSO/ISSM experience.
Working knowledge of auditing, vulnerability scanning and remediation, DISA STIGs, change control, and implementing RMF requirements.
Excellent verbal and written communication skills to produce clear documentation for certification evaluation.
ICBM experience.
Current DoD Top Secret security clearance.

Compensation and Benefits

Primary Level Salary Range: $98,400.00 - $147,600.00
Secondary Level Salary Range: $122,800.00 - $184,200.00

The salary ranges listed are guidelines. Base offers consider the scope and responsibilities of the position, along with the candidate's experience, education, skills, and current market conditions. Depending on the role, overtime, shift differential, and a discretionary bonus may be available in addition to base pay. Annual bonuses recognize individual contributions and company performance. Vice President or Director level positions may be eligible for Long Term Incentives. Northrop Grumman provides a comprehensive benefits package including health, life and disability insurance, a savings plan, company paid holidays, and paid time off for vacation and personal needs.

Location, Security, and Application Timeline

Location: Clearfield, Utah
Security clearance: Clearance to start is not required, but Top Secret clearance is the designated clearance type.
Citizenship: U.S. citizenship required for roles with government clearance.
Travel: Up to 10 percent of the time.
Relocation: Relocation assistance may be available.

The application period is estimated to be 20 days from the posting date. Depending on business needs and candidate availability, this timeline may be shortened or extended.

View full job page →

Principal Cybersecurity Jobs

Principal Cybersecurity Engineer

Principal/Sr. Principal Cybersecurity Analyst- 18713

Get Principal Cybersecurity Jobs alerts