Apply on Employer Site

Northrop Grumman · 1 day ago

Principal Classified Cybersecurity Analyst - Secret - R10217248

Chandler, AZ

Part-time

Onsite

Senior Level, Lead/Staff

$98K/yr - $148K/yr

5+ years exp

Northrop Grumman is a leader in technological advancements, seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The role involves assessing systems and networks, establishing program control processes, and ensuring compliance with security requirements within classified environments.

AerospaceData IntegrationManufacturingRemote SensingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy

Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems

Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits

Assist in the implementation of the required government policy, make recommendations on process tailoring, participate in and document process activities

Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards

Support the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports

Document the results of Certification and Accreditation activities and technical or coordination activity and prepare the system Security Plans and update the Plan of Actions and Milestones POA&M

Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed

Qualification

DoD 8570 IAM level IICybersecurity practicesRisk Management FrameworkCertificationAccreditationNIST SP 800-53Vulnerability scanningTeam coordinationDetail orientedProblem solvingVerbal communicationWritten communication

Required

Master's degree with 3 years of relevant technical experience; OR a Bachelor's degree with 5 years of relevant technical experience; OR an Associates degree with 7 years of relevant technical experience; OR a High School Diploma/GED with 9 years of relevant technical experience is required

Must have a current DoD 8570 / DoD 8140 IAM level II equivalent (or higher) security certification (examples: CAP / CGRC, CASP+/SecurityX, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP)

Demonstrated knowledge of Cybersecurity practices, network technologies, and system development life-cycles, in addition to an understanding of information technology infrastructure management/monitoring and applications

Candidates must have a current DOD Secret level security clearance (at a minimum) in order to be considered

Preferred

The ideal candidate will have a Bachelor's degree in Cyber Security, a CASP+/SecurityX, and 6 years of experience with Certification and Accreditation of classified systems and Risk Management Framework

Knowledge of ACAS, NESSUS, SPLUNK, SCAP, POA&Ms, NIST, NISPOM, system audits, vulnerability scanning, and RMF/eMASS package development

Experience enforcing guidelines, monitoring policies, and enforcing standards for Cybersecurity frameworks and industry best practices supporting National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, CNSSI 1253, and DoD RMF

Detail oriented with experience tracking project progress and status

Ability to solve complex problems with a mindset on cybersecurity compliance

Experience coordinating with a team to review and document information system changes

Experience and working knowledge and understanding of auditing, vulnerability scanning/remediation, SIEMs, DISA STIGs, and configuration/change control

Strong verbal and written communication skills to produce coherent and concise documentation required for evaluation

Active Top Secret, SCI, SAP/SAR access, or Polygraph is preferred