This role pays more than
72%
of similar roles. Most pay
$135,000–$200,000
— the shaded band above.
At the midpoint, this role pays about
$191k
versus about
$168k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
351 open roles
on FindRole.
Listed pay typically runs
$114,000–$171,000
across 336 roles with salary data.
Staff Cybersecurity Analyst-19969 serves as a primary technical authority and Information System Security Engineer for the Sentinel program. This high-level individual contributor role involves leading the design, assessment, and tailoring of complex cybersecurity architectures across enterprise, mission, and classified network environments. The successful candidate will translate NIST SP 800-53 controls and CNSSI 1253 baselines into automated security solutions while managing RMF compliance, ST&E plans, and Authorization to Operate packages. Day-to-day responsibilities include hardening heterogeneous systems like Windows Server and Red Hat Enterprise Linux, performing vulnerability assessments, and developing automation scripts using PowerShell, Python, and Ansible. The role requires expertise in tools such as Tenable ACAS, Rapid7, Trellix, Splunk, and DISA STIG Viewer to ensure security compliance across various infrastructure components while mentoring other engineers on risk assessment methodologies and advanced compliance frameworks.
Lead the engineering and tailoring of NIST SP 800-53 security controls and CNSSI 1253 baselines for complex system architectures.
Define and enforce program-specific Organization-Defined Parameters (ODPs) to meet Authorizing Official risk tolerances.
Architect and implement system hardening baselines across Windows, Linux, storage, virtualized, and cloud environments.
Manage Security Test & Evaluation plans, POA&M tracking, and the compilation of Authorization to Operate (ATO) packages.
Execute vulnerability assessments and manage SIEM logging using tools like Tenable ACAS, Rapid7, Trellix, and Splunk.
Develop automated scripts in PowerShell, Python, or Ansible to audit and remediate security configuration drift.
Integrate cybersecurity requirements into the total system design lifecycle through risk trade studies and DevSecOps collaboration.
Represent the company's cybersecurity posture during government inspections, technical meetings, and executive reviews.
What we're looking for
Must have an active U.S. Government DoD Secret security clearance at time of application.
Must possess a current DoD 8140/8570 compliant IAM Level III or IASAE Level II/III certification (e.g., CISSP, CASP+, Security+, CISSP-ISSEP, CISM).
Bachelor’s degree with 12 years of experience, Master's with 10 years, PhD with 8 years, or 4 additional years of experience in lieu of a degree.
Advanced expertise in NIST SP 800-53, CNSSI 1253, and DoD RMF lifecycle execution.
Experience defining Organization-Defined Parameters (ODPs) and preparing technical security artifacts for ATO assessments.
Hands-on experience with DISA STIGs, SIEM tools like Splunk, vulnerability scanners like ACAS/Nessus, and host security tools like Trellix.
U.S. Citizenship is required.
Active Top Secret with current SAP/SAR access (preferred); Advanced degree in Cybersecurity, Information Assurance, or Systems Engineering (preferred).
NIST SP 800-53
RMF
DISA STIGs
Tenable ACAS
Nessus
Trellix/HBSS
Splunk
Python
PowerShell
Ansible
Terraform
Windows Server
Red Hat Enterprise Linux
Docker
Kubernetes
OpenShift
SCAP
CNSSI 1253
Penetration Testing
Network Penetration Testing
Python
Java
C
C++
Ruby
Shell Scripting
Perl
Burp Suite
Nmap
Nessus
OWASP Top 10
SANS Top 25
CVSS
SSL
AES
HTTP
DNS
FTP