Classified Cybersecurity Analyst

Northrop Grumman; Aurora (CO); On-site; USD 92,000 - 138,000; Full time

Job summary

Northrop Grumman is seeking a Classified Cybersecurity Analyst to support information system lifecycle work for the CIDO Classified Solutions team. This on-site role is based in Aurora, CO and focuses on audits, continuous monitoring, assessments, and RMF evidence for classified environments.

You will perform system audits, support A&A activities, coordinate with government authorities, and help document security controls and ST&E efforts.

Qualifications

• Master’s degree with 0 years of technical experience, or Bachelor’s with 2 years, or Associate’s with 4 years, or HS diploma with 6 years.
• US 8140 requirements (8570 equivalent) for Classified Cybersecurity Analyst – IAM I or higher.
• Current U.S. Government Top Secret clearance with SCI eligibility.
• Ability to obtain and maintain access to Special Access Programs.

Responsibilities

• Conduct system audits and continuous monitoring of security controls.
• Perform assessments of systems and networks in the enclave.
• Analyze security requirements and recommend safeguards.
• Support government policy implementation and process tailoring.
• Assist A&A activities and RMF evidence preparation.

Skills

System audits

Continuous monitoring

Security assessments

Risk management

Documentation

Education

Master’s degree

Bachelor’s degree

Associate’s degree

High School Diploma/GED

Tools

ACAS

Nessus

Splunk

Trellix

SCAP

Job description

Northrop Grumman is seeking a Classified Cybersecurity Analyst to support information system lifecycle work for the CIDO Classified Solutions team. This is an on-site, full-time role in Aurora, CO, focused on activities tied to audits, continuous monitoring, assessments, and documentation used for Assessment and Authorization (A&A) and Risk Management Framework (RMF) evidence within classified program environments.

What you will do

• Conduct system audits and continuous monitoring across security controls, configurations, and operational processes to evaluate the security posture of information systems.
• Perform assessments of systems and networks in the networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy.
• Analyze security requirements to validate established needs and recommend additional requirements and safeguards.
• Support implementation of required government policy, including recommendations for process tailoring, and participate in and document process activities.
• Work within program control processes to mitigate risk and support Assessment and Authorization (A&A), including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging-technology research, inspections, and periodic audits.
• Support formal Security Test and Evaluation (ST&E) efforts for government accrediting authorities, including pre-test preparations, test participation, analysis of results, and preparation of required reports.
• Document A&A results and related technical and coordination activities, and prepare the Risk Management Framework body of evidence.

Minimum qualifications

• Master’s degree with 0 years of technical experience; OR Bachelor’s degree with 2 years; OR Associate’s degree with 4 years; OR High School Diploma/GED with 6 years of technical experience.
• Meet the U.S. Government 8140 requirements (8570 equivalent) for a Classified Cybersecurity Analyst – IAM level I certification or higher (examples include Security+, CND, Cloud+, CAP or CGRC, CASP+ or CompTIA Security X, CISSP-Associate, CISM, CISSP, GSLC, CCISO).
• Hold a current U.S. Government Top Secret security clearance (at a minimum), including SCI access level eligibility based on a closed investigation date completed within the last 6 years OR be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
• Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Relevant tools and frameworks

• Security and assessment tools: ACAS, Nessus, Splunk, Trellix, SCAP
• Standards and guidance: NIST, JSIG, DAAG
• Program and documentation artifacts: SSPs, POA&Ms, SCTMs
• Certifications listed in the role: Security+, CND, Cloud+, CAP, CGRC, CASP+, CompTIA Security X, CISSP-Associate, CISM, CISSP, GSLC, CCISO

Compensation and schedule

• Salary range: USD 91,800 - 137,600 per year
• Work schedule: 9/80 work schedule
• Travel: Yes, 10% of the time

Benefits

• Exceptional benefits/healthcare
• 401k matching program
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business

Clearance and work location

• Clearance required for start: Yes
• Clearance type: SCI
• Location: Aurora, CO (onsite)
• Remote work: Not available due to the classified nature of the work
• Relocation assistance: No relocation assistance available

Application timing

The application period is estimated to be 20 days from the job posting date, though the timeline may be shortened or extended based on business needs and availability of qualified candidates.