St&e Cybersecurity Jobs

1 job found

Today

Principal Cybersecurity Analyst / Sr. Principal Cybersecurity Analyst

Northrop Grumman Chantilly, VA

Chantilly, VA

Today

$114k - $213k/yr Full time Information Security Information Technology (IT) InfoSec

Apply Now

Job Description

Northrop Grumman is hiring a Principal Cybersecurity Analyst or Sr. Principal Cybersecurity Analyst to support mission-critical network infrastructure in Chantilly, VA. In this onsite role, you will help perform system and network assessments, contribute to Security Test and Evaluation (ST&E), and maintain Certification and Accreditation (A&A) activities aligned to the Risk Management Framework (RMF) for customer products.

Role overview

You will support program control processes that focus on risk mitigation, including implementation of applicable government policy (such as NISPOM and DCID 6-3). The work also includes validating security requirements and recommending safeguards, documenting A&A results, and monitoring corrective actions until closure.

Responsibilities

Assess systems and networks within the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
Establish strict program control processes to support risk mitigation and obtaining certification and accreditation for systems.
Assist with implementation of required government policy, including recommendations on process tailoring and participation in documented process activities.
Analyze security requirements to validate established controls and recommend additional security requirements and safeguards.
Support formal Security Test and Evaluation (ST&E) required by government accrediting authorities, including pre-test preparations, test participation, results analysis, and report preparation.
Document Certification and Accreditation results and technical or coordination activity, including preparation of system Security Plans and updates to the Plan of Actions and Milestones (POA&M).
Periodically review system audit results and monitor corrective actions until all actions are closed.

Requirements

Active TS/SCI with Polygraph required to be considered and required to start.
Experience reviewing technical security assessments of computing environments to identify vulnerabilities or non-compliance.
Experience implementing the Risk Management Framework (RMF) Process and the ability to support and document certification and accreditation artifacts.
Experience supporting the A&A process for system accreditation.
Hands-on experience capturing, inspecting, and analyzing network packets using tools such as Wireshark and SolarWinds.
Proficiency querying logs, building dashboards, and investigating alerts in SIEM platforms such as Splunk and ELK Stack.
Solid understanding of the OSI model, TCP/IP networking, DNS, HTTP/S, VPNs, and firewall rule sets.
Familiarity with RMF and nuances in applying RMF.
Familiarity with NIST 800-53 rev. 4, CNSS-1253, National Security Memorandum 8 (NSM-8), and Zero Trust Architecture/Networking (ZTA/N) high-level concepts and possible implementations.
Familiarity with initial accreditation activities and continuous monitoring, with willingness to adapt to changing toolsets and control requirements.
Familiarity with network monitoring and vulnerability detection tools such as Nessus, Rapid7, Splunk, and Xacta, plus strong competency with Microsoft Office (Excel, PowerPoint, and Word).

Preferred qualifications

CISSP, CASP, or other information technology security related certifications.
Experience using Rapid7 or Tenable Nessus applications.
Background in Technical Writing or Instructional Systems Design would be helpful.
Privileged or power-user level knowledge is strongly suggested in at least one of: Microsoft Windows, Enterprise Linux variants.
Cloud computing infrastructure experience such as AWS or Microsoft Azure.

Technologies

NIST 800-53 rev. 4, CNSS-1253, NISPOM, DCID 6-3, National Security Memorandum 8 (NSM-8), Zero Trust Architecture/Networking (ZTA/N), Risk Management Framework (RMF), Assessment and Authorization (A&A), Security Test and Evaluation (ST&E), POA&M
Nessus, Rapid7, Splunk, Xacta, Wireshark, SolarWinds
SIEM platforms, ELK Stack
Microsoft Office (Excel, PowerPoint, Word), OSI model, TCP/IP networking, DNS, HTTP/S, VPNs, firewall rule sets
Microsoft Windows, Enterprise Linux variants, AWS, Microsoft Azure

Compensation, location, and travel

Location: Chantilly, VA (onsite)
Salary: USD 114,000 - 213,400 per year
Primary level range: $114,000.00 - $171,000.00
Secondary level range: $142,200.00 - $213,400.00
Travel: Yes, 10% of the Time
Relocation assistance: No relocation assistance available

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on the position, employees may be eligible for overtime
Depending on the position, employees may be eligible for shift differential
Depending on the position, employees may be eligible for a discretionary bonus in addition to base pay
Annual bonuses
Employees in Vice President or Director positions may be eligible for Long Term Incentives

Application window and eligibility notes

Application period is estimated to be 20 days from the job posting date.
Equal Opportunity Employer: Northrop Grumman makes decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class.
U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.

View full job page →

Get St&e Cybersecurity Jobs alerts

New St&e Cybersecurity Jobs, daily.