This role pays less than
65%
of similar roles. Most pay
$122,275–$162,000
— the shaded band above.
At the midpoint, this role pays about
$130k
versus about
$142k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
455 open roles
on FindRole.
Listed pay typically runs
$117,500–$176,300
across 270 roles with salary data.
Cybersecurity Analyst 3/4 joins the CIDO Classified Solutions team to support information systems lifecycle activities within a specialized work environment. The role involves conducting system audits, continuous monitoring of security controls, and performing assessments of networks to identify deviations from established policies. Key responsibilities include implementing government policies, managing Risk Management Framework body of evidence, coordinating with program managers and system administrators, and mentoring junior staff on testing and documentation standards. The position requires expertise in the RMF framework and specific tools such as EMASS, Xacta, ACAS, Nessus, Splunk, SEPM, and SCAP. Candidates must navigate complex security requirements including NIST, JSIG, and DAAG to ensure systems meet required cybersecurity standards while supporting mission objectives. This role addresses critical security posture challenges for classified information systems through rigorous assessment, authorization, and technical coordination.
Conduct system audits and continuous monitoring to evaluate security controls and operational processes.
Assess networks within enclaves to identify deviations from acceptable configurations or local policies.
Establish program control processes to mitigate risks and support Assessment and Authorization (A&A) of systems.
Support formal Security Test and Evaluation (ST&E) through pre-test preparation, testing participation, and report analysis.
Create and maintain Risk Management Framework (RMF) artifacts including diagrams, lists, and technical documentation.
Coordinate with program managers and system administrators to meet required cybersecurity standards.
Mentor junior staff by reviewing work products and providing guidance on testing and documentation best practices.
What we're looking for
Must have a current U.S. Government Secret security clearance or be in the Continuous Evaluation program with the ability to obtain Top Secret access.
Must have the ability to obtain and maintain access to Special Access Programs (SAP) and SCI programs.
For Level 3, must have a Master's with 3 years experience, Bachelor's with 5 years, Associate's with 7 years, or High School/GED with 9 years.
For Level 4, must have a Master's with 6 years experience, Bachelor's with 8 years, Associate's with 10 years, or High School/GED with 12 years.
Must meet U.S. Government 8140 requirements for a Principal Cybersecurity Analyst (Security+ or equivalent).
Must meet U.S. Government 8140 requirements for a Sr Principal Cybersecurity Analyst (CISSP or equivalent).
U.S. Citizenship is required.
Preferred qualifications include a Bachelor's in Cybersecurity, RMF experience, Top Secret/SAP/SCI access with Polygraph, and knowledge of tools like ACAS, Nessus, or Splunk.