Senior Principal Cybersecurity Analyst

Northrop Grumman

Confirmed live yesterday Trusted

Quick summary

Work type: On-site
Location: Roy, UT
Salary: $98,400–$147,600 / yr
Posted: 29 days ago
Freshness: Confirmed live yesterday
Nearby: 54 roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $152k

This role $123k

$87k most similar roles pay here $205k

This role pays less than 78% of similar roles. Most pay $127,150–$177,750 — the shaded band above. At the midpoint, this role pays about $123k versus about $152k for comparable roles.

Based on 239 similar postings.

Employer

About Northrop Grumman

Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense

Northrop Grumman currently has 367 open roles on FindRole.

Listed pay typically runs $114,900–$176,300 across 353 roles with salary data.

Most-posted roles

View all roles at Northrop Grumman

At a glance

TL;DR · Senior Principal Cybersecurity Analyst

Role Posting Log in to save

Sr / Principal Cybersecurity Analyst joins the Classified Solutions team to support information systems lifecycle activities. This role involves designing, integrating, and maintaining Cross-Domain Solutions to facilitate secure, policy-compliant data transfers between classified and unclassified networks. The analyst will manage cybersecurity programs, conduct risk assessments, perform system audits, and execute continuous monitoring of security controls. Key responsibilities include performing hardware and software configurations, leading formal Security Test and Evaluation processes, and preparing critical documentation such as System Security Plans and Risk Acceptance Reports to ensure compliance with government directives. Required skills include proficiency in tools like ACAS, Nessus, Splunk, Trellix, and SCAP, along with knowledge of NIST, JSIG, and DAAG frameworks. The role addresses the technical challenge of securing multi-domain systems while ensuring rigorous adherence to federal security requirements for high-security environments.

Skills

Cross‑Domain Solutions (CDS RMF NIST ACAS Nessus Splunk Trellix SCAP JSIG DAAG Security+ CySA+ GICSP GSEC CND SSCP

What you'll do

Design, integrate, and maintain Cross-Domain Solutions for secure data transfer between classified and unclassified networks.
Manage the cybersecurity program and execute all related tasks for assigned information systems.
Conduct regular system audits and continuous monitoring to improve security posture and operational efficiency.
Assess network environments to identify deviations from established policies or acceptable configurations.
Analyze and validate security requirements while recommending necessary safeguards and process tailoring.
Oversee program control processes to mitigate risk and support Assessment and Authorization (A&A) activities.
Lead formal Security Test and Evaluation (ST&E) including preparation, testing, and reporting for government authorities.
Prepare and submit critical compliance documentation such as System Security Plans and Risk Acceptance Reports.

What we're looking for

Must possess a current U.S. Government Top Secret security clearance or be enrolled in the Continuous Evaluation Program.
Must have the ability to obtain and maintain access to Special Access Programs.
U.S. Citizenship is required for this position.
Candidates must meet U.S. Government 8140 requirements for Cybersecurity (e.g., Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP).
Level 3 requires a Master's with 3 years experience, Bachelor's with 5 years, Associate's with 7 years, or High School with 9 years.
Level 4 requires a Master's with 6 years experience, Bachelor's with 8 years, Associate's with 10 years, or High School with 12 years.
Experience in cybersecurity compliance such as Assessment & Authorization under RMF (preferred).
Knowledge of security tools like ACAS, Nessus, Splunk, Trellix, and SCAP; and frameworks like NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs (preferred).

Save