DoD RMF & STIGs Cybersecurity Analyst

Northrop Grumman Corp.; Roy (UT); On-site; USD 79,000 - 119,000; Full time

Benefits offered by this job

Medical, Dental & Vision

401k

Educational Assistance

Life Insurance

Employee Assistance Programs & Work/Li

Paid Time Off

Health & Wellness Resources

Employee Discounts

Job summary

Northrop Grumman Defense Systems in Roy, UT is seeking a Cybersecurity Analyst to lead RMF activities, assess vulnerabilities, and ensure compliance with NIST SP 800-series and DoD directives. The role supports the Sentinel program and requires DoD Secret clearance and related certifications.

You will work with software, systems engineering, and program teams to integrate security into the DevSecOps lifecycle, including containerized workloads.

Qualifications

• Active US DoD Secret clearance at time of application.
• Hands-on RMF/NIST SP 800-53 experience in DoD/IC environments.
• Experience with vulnerability scanning and STIGs.
• DOD security framework and artifact development experience.

Responsibilities

• Lead RMF activities from categorization to ATO and continuous monitoring.
• Apply NIST SP 800-160 principles to secure architectures.
• Evaluate and harden controls per NIST SP 800-53 rev 5 / 800-171.
• Run vulnerability scans with ACAS/Nessus/Rapid7 and document deviations.
• Draft SSPs, SARs, POA&Ms, SCTMs for accreditation.
• Collaborate with DevSecOps teams to secure container workloads.

Education

Bachelor's degree with 2 years of experience

Master's degree

DoD 8570/8140 IAM Level I or IAT II certification

Active DoD Secret clearance

RMF / NIST SP 800-53 experience

Tools

ACAS/Nessus/Rapid7

DISA STIG implementation

SCAP tooling

Scripting: Python/PowerShell/Ansible/Terraform

Container security: Docker/Kubernetes/OpenShift

Job description

Northrop Grumman Defense Systems in Roy, UT is seeking a Cybersecurity Analyst to lead RMF activities, assess vulnerabilities, and ensure compliance with NIST SP 800-series and DoD directives. The role supports the Sentinel program and requires DoD Secret clearance and related certifications.

You will work with software, systems engineering, and program teams to integrate security into the DevSecOps lifecycle, including containerized workloads.