This role pays less than
93%
of similar roles. Most pay
$122,818–$177,387
— the shaded band above.
At the midpoint, this role pays about
$99k
versus about
$150k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
347 open roles
on FindRole.
Listed pay typically runs
$114,000–$171,000
across 333 roles with salary data.
The Cybersecurity Analyst-19971 joins the Northrop Grumman Defense Systems team to support the Sentinel program. This role focuses on leading Risk Management Framework activities, assessing system vulnerabilities, and ensuring strict compliance with NIST SP 800-series standards and DoD instruction set directives. The individual will perform security engineering tasks, implement DISA STIGs across Linux, Windows Server, and cloud environments, and author critical accreditation artifacts like System Security Plans and Plan of Action & Milestones. Day-to-day responsibilities include executing automated vulnerability scans using tools such as ACAS, Nessus, and Trellix/HBSS/ESS while integrating security into DevSecOps and containerized workloads. The role requires expertise in NIST SP 800-53 and 800-171 controls to secure defense applications. Key technical skills include experience with SCAP, scripting tools like Python or Ansible, and hardening practices for space or ground segment defense systems.
Execute Risk Management Framework (RMF) steps from categorization through Authorization to Operate (ATO).
Design and maintain system security architectures based on NIST SP 800-160 principles.
Implement and tailor security controls using NIST SP 800-53 and NIST SP 800-171 standards.
Apply DISA STIGs to harden Linux, Windows Server, and cloud environments.
Perform automated vulnerability scans using tools like ACAS, Nessus, and Trellix/HBSS.
Draft and maintain security artifacts including SSPs, SARs, POA&Ms, and SCTMs.
Integrate security into the DevSecOps lifecycle for software development and containerized workloads.
What we're looking for
Must be a U.S. citizen.
Must possess an active U.S. Government DoD Secret security clearance at time of application.
Bachelor's degree with 2 years of experience, or Master's degree; 4 additional years of experience may be considered in lieu of a completed degree.
Active IAM Level I or IAT Level II certification (e.g., Security+ CE, CySA+, CCNA Security, GICSP, or SSCP).
Demonstrated hands-on experience applying NIST SP 800-53 and NIST SP 800-37 (RMF) frameworks in a DoD or Intelligence Community environment.
Direct experience with DISA STIG implementation, auditing, and hardening practices.
Proficiency in executing vulnerability scans with tools like ACAS, Nessus, or Rapid7.
Advanced certifications such as CISSP, CASP+ CE, CISM, or AWS/Azure Security Specialty (preferred); Experience with NIST SP 800-160, cross-domain solutions, scripting, or container security (preferred).
NIST SP 800-53
RMF
DISA STIGs
Tenable ACAS
Nessus
Trellix/HBSS
Splunk
Python
PowerShell
Ansible
Terraform
Windows Server
Red Hat Enterprise Linux
Docker
Kubernetes
OpenShift
SCAP
CNSSI 1253
RMF
NIST SP 800-53
CNSSI 1253
Security Architecture
System Hardening
DevSecOps
Splunk
Tenable ACAS
Rapid7
Trellix
Python
PowerShell
Ansible
Windows Server
Red Hat Enterprise Linux
SIEM
Vulnerability Assessment
DISA STIGs
Penetration Testing
Network Penetration Testing
Python
Java
C
C++
Ruby
Shell Scripting
Perl
Burp Suite
Nmap
Nessus
OWASP Top 10
SANS Top 25
CVSS
SSL
AES
HTTP
DNS
FTP