Security Standards

Security Standards Cybersecurity Jobs

3 jobs found

Today

Cybersecurity Analyst / Principal Cybersecurity Analyst

Northrop Grumman Clearfield, UT

Clearfield, UT

Today

$79k - $148k/yr Full time Senior Cyber Investigation Cybersecurity Tools

Apply Now

Job Description

Northrop Grumman is seeking a cybersecurity professional to join its Ground Subsystem Support Contract team in Clearfield, Utah, onsite. The role focuses on performing assessments, supporting certification and accreditation activities, and driving security compliance under RMF and NIST standards to deliver trustworthy systems for defense applications.

Responsibilities

Conduct assessments of weapon system components and networks to identify deviations from approved configurations and policies, using both passive audits and active vulnerability assessments.
Establish program controls to mitigate risk and support certification and accreditation activities, including process support, analysis, coordination, security certification testing, documentation, investigations, software research, hardware introduction and release, emerging technology inspections, and periodic audits.
Document Assessment and Authorization results and coordinate related activities while preparing System Security Plans and updating the Plan of Actions and Milestones (POA&M).
Periodic reviews of system audits with ongoing monitoring and closure of corrective actions.
Provide analysis, design, development, implementation, and security assessments to ensure compliance with NIST SP 800-53, CNSSI 1253, and DoD RMF Knowledge Service guidance.
Apply analytical methods to evaluate the efficiency and effectiveness of cybersecurity implementations.
Develop system and policy documentation required for certification evaluation.
Perform other ISSM/ISSO duties as needed.
Apply scientific, engineering, and information assurance principles to deliver trustworthy systems that satisfy stakeholder requirements within established risk tolerances.

Requirements

Bachelor's degree with 2 years of experience, or Master's degree; 4 additional years of experience may be considered in lieu of a completed degree.
Bachelor's degree with 5 years of experience, or Master's degree with 3 years of experience, or PhD with 1 year of experience; 4 additional years of experience may be considered in lieu of a completed degree.
U.S. citizen able to obtain and maintain a U.S. Government DoD security clearance (Secret or Top Secret).
Current DoDD 8140 ISSM 722-Intermediate certification (examples: CGRC, CASP, CCISO, Security+), or ability to obtain within 6 months; maintaining certification is a condition of employment.
Experience with NIST Cybersecurity Framework, FedRAMP, PCI DSS, or similar cybersecurity frameworks.
Ability to prioritize and execute tasks in a collaborative team environment within established schedules and timelines.

Technologies

NIST SP 800-53
CNSSI 1253
DoD RMF Knowledge Service
NIST Cybersecurity Framework
FedRAMP
PCI DSS
DISA STIGs

Benefits

Health insurance coverage
Life insurance
Disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Long Term Incentives
Annual bonuses
Discretionary bonus

Relocation Assistance

Relocation assistance may be available

Clearance

Clearance required for start: No
Clearance type: Top Secret

Travel

Yes, 10% of the time

Compensation

Primary level salary range: $79,300.00 - $118,900.00
Secondary level salary range: $98,400.00 - $147,600.00

View full job page →

Today

Sr Principal Cybersecurity Analyst

Northrop Grumman Roy, UT

Roy, UT

Today

$123k - $184k/yr Full time Manager Senior Analytics

Apply Now

Job Description

This on-site role in Roy, Utah focuses on managing the cybersecurity program for assigned information systems and leading A&A, ST&E, and security assessment activities for classified environments requiring Top Secret clearance.

Benefits

Flexible work arrangements
Learning opportunities
Exposure to a wide variety of projects and customers
Health insurance coverage
Life and disability insurance
Savings plan
9/80 work schedule
401k matching program
Paid holidays and PTO

Relocation Assistance

Relocation assistance may be available

Clearance Required for Start

Yes

Clearance Type

Top Secret

Travel

Yes, 10% of the Time

Technologies

ACAS
Nessus
Splunk
Trellix
SCAP
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs

Responsibilities

Manage the cybersecurity program for all assigned information systems and execute all cybersecurity tasks.
Lead regular reviews of system audits and continuous monitoring, covering all security controls and configurations to strengthen the information system security posture.
Assess systems and networks within the enclave and identify deviations from acceptable configurations or policies.
Analyze to validate established security requirements and recommend additional safeguards.
Drive implementation of applicable government policy, tailor processes as needed, and participate in documented process activities.
Establish and oversee strict program control processes that mitigate risk and support system Assessment and Authorization (A&A), including process support, coordination, security certification testing, documentation, investigations, and technology evaluations.
Lead the formal Security Test and Evaluation (ST&E) required by accrediting authorities, from pre-test preparations through test participation, result analysis, and reporting.
Document A&A and inspection results along with any technical or corrective actions, coordinating with the security team to prepare responses for the cognizant authority.
Prepare, review, and submit A&A documentation such as System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, and Plan of Action and Milestones for review and approval.

Requirements

Master's degree with 6 years of relevant experience; or Bachelor's with 8 years; or Associate's with 10 years; or High School Diploma/GED with 12 years of relevant experience
Must meet United States Government 8140 requirements for a Senior Principal Cybersecurity Analyst
Current U.S. Government Top Secret Security clearance (or enrollment in Continuous Evaluation) with a closed investigation date within the last 6 years
Ability to obtain and maintain access to Special Access Programs as a condition of employment

View full job page →

Today

Senior Staff Product Security Engineer

Draeger Medical Systems, Inc. Andover, MA

Andover, MA

Today

$140k - $169k/yr Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Hybrid work in Andover, MA with a competitive annual salary and a benefits-forward culture anchored by the principle Technology for Life.

Salary range: USD 140,400 - 168,500 per year.

Medical, dental, and vision insurance
Life, short- and long-term disability coverage
401(k) with company match
Over 4 weeks of paid time off, plus holidays and parental leave
Flexible spending accounts and employee assistance program
Free parking (select locations)
On-site gym (select locations)
Cafeteria (select locations)
Game room (select locations)

Responsibilities

Define long term product cybersecurity strategy and enterprise security architecture direction.
Establish global cybersecurity design standards and governance frameworks across product portfolios.
Lead enterprise level vulnerability management strategy and risk prioritization decisions.
Represent the organization in regulatory engagements and industry cybersecurity initiatives.
Drive alignment with evolving global cybersecurity regulations and standards.
Define cybersecurity metrics and continuous improvement initiatives.
Develop senior engineering capability and provide technical mentorship.
Performs other duties as needed and assigned.

Requirements

Bachelor of Science in Computer Science, Cybersecurity, Computer Engineering, or related discipline.
Master preferred.
10 or more years of experience in cybersecurity engineering within regulated medical device or similar industries.
Demonstrated enterprise level influence in cybersecurity strategy and regulatory alignment.
Cybersecurity Certifications: CISSP ISSMP Information Systems Security Management Professional, Offensive Security Certified Professional OSCP, GIAC Enterprise Defender GCED; Equivalent advanced enterprise level cybersecurity certifications will be considered.
Ability to define enterprise product cybersecurity strategy aligned with evolving global regulatory expectations.
Experience adjudicating complex cybersecurity risk decisions balancing patient safety and system availability.
Representation of the organization in regulatory discussions and industry cybersecurity forums.
Enterprise vulnerability management platforms
Security architecture modeling tools
Metrics and governance reporting platforms

Technologies

Enterprise vulnerability management platforms
Security architecture modeling tools
Metrics and governance reporting platforms

Who we are

We are hiring and invite contributions that make a real difference. Draeger operates under the guiding principle Technology for Life. Our North America footprint includes sites across the U.S. and Canada, with the North America headquarters in Telford, PA, and locations in Andover, MA and Houston, TX, plus Mississauga, Ontario.

Draeger is an Equal Opportunity Employer.

Interested candidates should apply directly through our career portal.

View full job page →

Security Standards Cybersecurity Jobs

Cybersecurity Analyst / Principal Cybersecurity Analyst

Sr Principal Cybersecurity Analyst

Senior Staff Product Security Engineer

Get Security Standards Cybersecurity Jobs alerts