Apply on Employer Site

Northrop Grumman · 6 hours ago

Principal/Sr. Principal Cybersecurity Analyst - R10218820

Bethpage, NY

Full-time

Onsite

Senior Level, Lead/Staff

$114K/yr - $171K/yr

5+ years exp

Northrop Grumman is a leading technology company that provides innovative solutions for global security challenges. They are seeking a Principal Cybersecurity Analyst to conduct assessments of systems and networks, establish program control processes, and support compliance with government policies.

AerospaceData IntegrationManufacturingRemote SensingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy; this is achieved through passive evaluations such as compliance audits and active evaluations such as vulnerability assessments

Establish strict program control processes to ensure mitigation of risks and support obtaining authorization to operate systems; this will include support of process, analysis, coordination, system assessment, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits

Assist in the implementation of the required government policy (i.e., NISPOM, ICD 503), make recommendations on process tailoring, and participate in and document process activities

Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards

Support the formal System Assessment required by each government authorizing authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports

Document the results of Assessment and Authorization activities and technical or coordination activity and prepare the System Security Plan(s) and update the Plan of Actions and Milestones (POA&M)

Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed

Qualification

DoD 8570 IAM level II certificationRisk Management FrameworkCybersecurity degreeVulnerability scanning toolsNIST complianceAnalytical skillsTechnical documentationTeam collaboration

Required

Master's degree with 3 years of relevant experience, or a Bachelor's degree with 5 years of relevant experience, or an Associate's degree with 7 years of relevant experience; a High School Diploma or equivalent with 9 years of relevant experience may be considered in lieu of a completed degree

PhD with 4 years of relevant experience, or a Master's degree with 6 years of relevant experience, or a Bachelor's degree with 8 years of relevant experience, or an Associate's degree with 10 years of relevant experience; a High School Diploma or equivalent with 12 years of relevant experience may be considered in lieu of a completed degree

Applicants must have a current DoD Secret level security clearance (at a minimum), to include a closed investigation date completed within the last 6 years, or must be enrolled in the DoD Continuous Evaluation Program (CEP), in order to be considered; the required security clearance must be maintained as a condition of continued employment

Must have a current DoD 8570 IAM level II (or higher) security certification (examples: CGRC/CAP, CASP CE, CCISO, HCISPP, CISM, GSLC, CISSP-Associate, or CISSP); the required certification must be maintained as a condition of continued employment

The selected candidate will be required to obtain and maintain a Special Access Program (SAP/SAR) clearance as a condition of continued employment

Preferred

The ideal candidate will have a Bachelor's degree in Cybersecurity and 3+ years of Risk Management Framework experience

Knowledge of ACAS/NESSUS or other vulnerability scanning tool(s), SPLUNK, Elastic Stack/ELK, STIGs and configuration tools, POA&Ms, NIST, DAAPM/JSIG, system audits, vulnerability scanning, and RMF package development