Senior Principal Cybersecurity Analyst

Northrop Grumman

Confirmed live 2 days ago Trusted

Quick summary

Work type: On-site
Location: Roy, UT
Salary: $98,400–$147,600 / yr
Posted: 15 days ago
Freshness: Confirmed live 2 days ago
Nearby: 54 roles within 25 mi

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $165k

This role $123k

$87k most similar roles pay here $207k

This role pays less than 85% of similar roles. Most pay $139,828–$189,197 — the shaded band above. At the midpoint, this role pays about $123k versus about $165k for comparable roles.

Based on 239 similar postings.

Employer

About Northrop Grumman

Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense

Northrop Grumman currently has 367 open roles on FindRole.

Listed pay typically runs $114,900–$176,300 across 353 roles with salary data.

Most-posted roles

View all roles at Northrop Grumman

At a glance

TL;DR · Senior Principal Cybersecurity Analyst

Role Posting Log in to save

Sr. Principal/Principal Cybersecurity Analyst joins the Classified Solutions team to support information systems lifecycle activities. This role involves designing, integrating, and maintaining Cross-Domain Solutions to facilitate secure, policy-compliant data transfers between classified and unclassified networks. The analyst will manage cybersecurity programs, conduct risk assessments, perform system audits, and ensure continuous compliance with government security directives. Daily responsibilities include configuring hardware and software, performing rigorous testing, and preparing essential documentation such as System Security Plans and Risk Acceptance Reports. Key technical competencies include experience with Assessment and Authorization under RMF, knowledge of NIST, JSIG, and DAAG frameworks, and proficiency with tools like ACAS, Nessus, Splunk, Trellix, and SCAP. The position addresses the critical challenge of securing multi-domain systems while ensuring robust data integrity across disparate network environments in a high-security government context.

Skills

Cross‑Domain Solutions RMF NIST ACAS Nessus Splunk Trellix SCAP JSIG DAAG Security+ CySA+ GICSP GSEC CND SSCP Cybersecurity Risk Assessment System Audit Continuous Monitoring

What you'll do

Design, integrate, and maintain Cross-Domain Solutions (CDS) for secure data transfer between classified and unclassified networks.
Manage the cybersecurity program and execute all related tasks for assigned information systems.
Conduct regular system audits and continuous monitoring to improve security posture and operational efficiency.
Assess network environments to identify and remediate deviations from established security policies or configurations.
Perform analysis to validate security requirements and recommend necessary safeguards or process tailoring.
Lead formal Security Test and Evaluation (ST&E) processes including preparation, testing, and result reporting.
Prepare and submit Assessment and Authorization (A&A) documentation such as System Security Plans and Risk Acceptance Reports.
Research emerging technologies and perform hardware/software evaluations to support system security certification.

What we're looking for

Must possess a current U.S. Government Top Secret security clearance or be enrolled in the Continuous Evaluation program.
Must have the ability to obtain and maintain access to Special Access Programs.
U.S. Citizenship is required for this position.
Must meet U.S. Government 8140 requirements for Cybersecurity (e.g., Security+ CE, CySA+, GICSP, GSEC, CND, or SSCP).
Level 3 requires a Master's with 3 years experience, Bachelor's with 5 years, Associate's with 7 years, or High School with 9 years.
Level 4 requires a Master's with 6 years experience, Bachelor's with 8 years, Associate's with 10 years, or High School with 12 years.
Experience in cybersecurity compliance and Assessment & Authorization under RMF is preferred.
Proven experience designing, implementing, and supporting Cross Domain Solutions (CDS) for secure data transfer is preferred.

Save