Associate Classified Cybersecurity Analyst (Secret) – On Site

Northrop Grumman Corp.; Los Angeles (CA); On-site; USD 70,000 - 110,000; Full time

Benefits offered by this job

Healthcare benefits

9/80 work schedule

Great 401k matching

Job summary

Northrop Grumman is seeking an Associate Classified Cybersecurity Analyst to join the CIDO Classified Solutions team on-site in our West Virginia location. The role demands a Secret clearance and experience in RMF, A&A, and security testing.

You will conduct audits, assessments, and documentation to support government security requirements. We expect strong knowledge of security tools (ACAS, Nessus, Splunk) and frameworks (NIST, JSIG, DAAG).

Qualifications

• Masters or Bachelor’s degree with experience; OR an Associate’s degree with 2 years; OR HS diploma with 4 years required.

Responsibilities

• Conduct system audits and continuous monitoring activities, covering all security controls, configurations, and operational processes.
• Perform assessments of systems and networks and identify deviations from policy.
• Analyze to validate security requirements and recommend safeguards.
• Assist in implementing government policy and document process activities.
• Work within program control processes to mitigate risks and support A&A.
• Support Security Test and Evaluation (ST&E) through pre-test, tests, and reporting.
• Document A&A results and RMF evidence.

Skills

ACAS

Nessus

Splunk

Trellix

SCAP

Security+ Certification

Clearance readiness

NIST

JSIG

DAAG

SSPs

POA&Ms

RMF framework

Education

Bachelor’s degree in Cybersecurity or related field

Associate’s degree

Master’s degree

Tools

ACAS

Nessus

Splunk

Trellix

SCAP

Job description

Northrop Grumman is seeking an Associate Classified Cybersecurity Analyst to join the CIDO Classified Solutions team on-site in our West Virginia location. The role demands a Secret clearance and experience in RMF, A&A, and security testing.

You will conduct audits, assessments, and documentation to support government security requirements. We expect strong knowledge of security tools (ACAS, Nessus, Splunk) and frameworks (NIST, JSIG, DAAG).