This role pays less than
76%
of similar roles. Most pay
$131,625–$189,350
— the shaded band above.
At the midpoint, this role pays about
$130k
versus about
$160k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
455 open roles
on FindRole.
Listed pay typically runs
$117,500–$176,300
across 271 roles with salary data.
The Principal Classified Cybersecurity Analyst - Secret joins the CIDO Classified Solutions team to support information systems lifecycle activities within a classified environment. This role involves conducting system audits, continuous monitoring of security controls, and performing assessments of networks to identify deviations from established policies. The analyst will validate security requirements, implement government policies, and manage risk mitigation through Assessment and Authorization processes. Key responsibilities include coordinating security certification testing, preparing Risk Management Framework body of evidence, and performing technical investigations and hardware research. The position requires proficiency in tools such as ACAS, Nessus, Splunk, Trellix, and SCAP, while utilizing frameworks like NIST, NISPOM, JSIG, and DAAG. The role focuses on ensuring the security posture of information systems within specific enclaves to meet rigorous government accreditation standards for secure technology solutions.
Conduct system audits and continuous monitoring to evaluate security controls and operational processes.
Assess networks within enclaves to identify deviations from established policies or configurations.
Analyze and validate security requirements while recommending additional safeguards for information systems.
Implement government policies and provide recommendations on process tailoring and documentation.
Establish program control processes to mitigate risks and support the Assessment and Authorization of systems.
Perform research on emerging technologies, hardware introductions, and software updates.
Support formal Security Test and Evaluation activities including pre-test preparation and result analysis.
Prepare Risk Management Framework body of evidence and document all technical coordination activities.
What we're looking for
Must have a Master's degree with 3 years experience, Bachelor's with 5 years, Associate's with 7 years, or High School/GED with 9 years.
Must possess a current U.S. Government Secret level security clearance.
Must meet U.S. Government 8140 (8570 equivalent) requirements for an IAM level II certification or higher.
U.S. Citizenship is required.
Bachelor’s degree in Cybersecurity or related field (preferred).
U.S. Government 8140 IAM III Certification (preferred).
Experience in cybersecurity compliance with DCSA, such as Assessment & Authorization under RMF (preferred).
Knowledge of security tools like ACAS, Nessus, Splunk, Trellix, and SCAP; and knowledge of frameworks like NIST, NISPOM, JSIG, DAAG, SSPs, POA&Ms, and SCTMs (preferred).
Risk Management Framework
NIST
JSIG
SAP
ACAS
Nessus
Splunk
Trellix
SCAP
DAAG
Cybersecurity Compliance
Information Systems Security Manager
Security Test and Evaluation
System Security Plan
Plan of Action and Milestones