below marketmost similar roles pay hereabove market
This role pays less than
90%
of similar roles. Most pay
$154,600–$214,500
— the blue band above.
At the midpoint, this role pays about
$123k
versus about
$185k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
629 open roles
on FindRole.
Listed pay typically runs
$117,500–$176,300
across 314 roles with salary data.
The Sr. Principal/Principal Cybersecurity Analyst joins the Classified Solutions team to support information systems lifecycle activities. This role involves designing, integrating, and maintaining Cross-Domain Solutions to facilitate secure, policy-compliant data transfers between classified and unclassified networks. The analyst will manage cybersecurity programs, conduct risk assessments, perform system audits, and lead formal Security Test and Evaluation activities. Key responsibilities include configuring hardware and software, identifying configuration deviations, and preparing essential documentation like System Security Plans and Risk Acceptance Reports. Required skills include proficiency with tools such as ACAS, Nessus, Splunk, Trellix, and SCAP, alongside knowledge of NIST, JSIG, and DAAG frameworks. The position addresses the technical challenge of maintaining continuous compliance with US Government security directives within complex networking environments and enclaves.
Design, integrate, and maintain Cross-Domain Solutions for secure data transfer between classified and unclassified networks.
Manage the cybersecurity program and execute all related tasks for assigned information systems.
Conduct regular system audits and continuous monitoring to enhance the security posture of information systems.
Perform network assessments to identify deviations from acceptable configurations, enclave policies, or local policies.
Lead formal Security Test and Evaluation (ST&E) processes required by government accrediting authorities.
Prepare and submit Assessment and Authorization (A&A) documentation including System Security Plans and Risk Acceptance Reports.
Research emerging technologies and perform hardware introduction and release activities.
Analyze security requirements to recommend additional safeguards and drive the implementation of government policies.
What we're looking for
Must have a current U.S. Government Top Secret security clearance with a closed investigation date within the last 6 years or be enrolled in Continuous Evaluation.
Must have the ability to obtain and maintain access to Special Access Programs.
U.S. Citizenship is required.
Must meet U.S. Government 8140 requirements for Cybersecurity (722), such as Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP.
For Level 3: Master's degree with 3 years experience, Bachelor's with 5 years, Associate's with 7 years, or High School diploma with 9 years.
For Level 4: Master's degree with 6 years experience, Bachelor's with 8 years, Associate's with 10 years, or High School diploma with 12 years.
Bachelor’s degree in Cybersecurity or related field (preferred).
Experience in cybersecurity compliance, RMF, Cross Domain Solutions, and tools like ACAS, Nessus, Splunk, Trellix, and SCAP (preferred).
Active Directory
Windows Server
Group Policy
DNS
DHCP
LDAP
RMF
STIG
JSIG
Cisco
VLANs
Routing
Cohesity
Vertias
SAN
Splunk
Solar Winds
HBSS
Linux
Unix
Scripting
Automation
Cybersecurity
Assessment & Authorization
Risk Management Framework
NIST
JSIG
ACAS
Nessus
Splunk
Trellix
SCAP
Assessment and Authorization
System Security Plan
Plan of Action and Milestones
Security Controls Traceability Matrix
Security Test and Evaluation
Cybersecurity Compliance
Information Systems Security Manager