Principal Cybersecurity Analyst

Northrop Grumman; Chantilly (VA); On-site; USD 177,000 - 266,000; Full time

Benefits offered by this job

Health insurance

Life and disability insurance

Savings plan

Company paid holidays

Paid time off

Job summary

Cybersecurity Jobs in Chantilly, VA seeks a Principal/Senior Principal Cybersecurity Analyst to support RMF-based C&A, security assessments, and ST&E activities for customer product suites. The role requires active TS/SCI with Polygraph and a bachelor's degree with 5 years of related experience.

Responsibilities include accrediting systems, conducting vulnerability assessments, documenting security plans, and coordinating audits and reports. Onsite work with competitive benefits is offered.

Qualifications

• Experience implementing the RMF process and documenting C&A artifacts.
• Experience supporting the A&A process for system accreditation.
• Familiarity with RMF and accrediting a system through it.
• Familiarity with NIST SP 800-53 rev.4, CNSS-1253, NSM-8.
• Knowledge of Zero Trust Architecture/Networking (ZTA/N).
• Bachelor’s degree and 5 years of relevant experience.

Responsibilities

• Support accreditation of mission-critical network infrastructure and assess system configurations.
• Conduct security assessments across networks and systems, identify deviations, and recommend mitigations.
• Prepare for and participate in ST&E activities and document results.
• Develop and maintain Certification and Accreditation artifacts and security plans.
• Monitor audits and track corrective actions until closure.
• Provide policy-compliant recommendations and support for RMF-based processes.

Skills

RMF process

A&A

System accreditation

Security assessments

NIST 800-53 Rev4

Zero Trust

Education

Bachelor’s degree

5 years experience

Tools

Nessus

Rapid7

Splunk

Xacta

Job description

Benefits-forward role supporting mission-critical network infrastructure in Chantilly, VA (onsite) with compensation ranging from $177,000 to $265,600 per year. This Principal / Sr. Principal Cybersecurity Analyst position supports certification and accreditation efforts, security assessments, and Security Test and Evaluation (ST&E) activities for customer product suites.

Responsibilities

• Support mission critical network infrastructure by collecting data for analysis and helping ensure maintenance and renewal of Assessment and Authorization accreditation for a suite of customer products.
• Perform assessments across systems and networks within a networking environment or enclave, identifying deviations from acceptable configurations, enclave policy, or local policy using both passive evaluations (for example, compliance audits) and active evaluations (including vulnerability assessments).
• Establish program control processes to support mitigation of risks and enable certification and accreditation of systems.
• Contribute to process support and analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research inspections, and periodic audits.
• Assist with implementation of required government policy (NISPOM and DCID 6-3), provide recommendations on process tailoring, and participate in and document process activities.
• Conduct analyses to validate established security requirements and recommend additional security requirements and safeguards.
• Support required Security Test and Evaluation (ST&E) activities by preparing for tests, participating, analyzing results, and preparing required reports.
• Document Certification and Accreditation results and technical or coordination activity, and prepare system Security Plans and update the Plan of Actions and Milestones (POA&M).
• Periodically conduct complete reviews of system audits and monitor corrective actions until all actions are closed.

Required Qualifications

• Active TS/SCI with Polygraph required to be considered and required to start.
• Experience implementing the Risk Management Framework (RMF) process and supporting/documenting Certification and Accreditation artifacts.
• Experience supporting the A&A process for system accreditation.
• Experience reviewing technical security assessments of computing environments that identify points of vulnerability or non-compliance.
• Familiarity with RMF and the process of accrediting a system through it, including nuances in applying RMF.
• Familiarity with NIST SP 800-53 rev.4, CNSS-1253, NSM-8, and high-level concepts of Zero Trust Architecture/Networking (ZTA/N) and possible implementations.
• Experience with both initial accreditation activities and continuous monitoring tasks, with willingness to adapt to rapidly changing toolsets and control requirements.
• Bachelor’s degree; 5 years of relevant experience (Principal) per the role level requirements.

Preferred Qualifications

• CISSP, CASP, or other information technology security related certifications.
• Experience using Rapid7 or Nessus.
• Background in Technical Writing or Instructional Systems Design.
• Privileged or power-user level knowledge in Microsoft Windows and/or Enterprise Linux variants.
• Background in cloud computing infrastructure such as AWS or Microsoft Azure.

Technology Exposure

• Risk Management Framework (RMF), NIST SP 800-53 rev.4, CNSS-1253, NSM-8, Zero Trust Architecture/Networking (ZTA/N)
• Nessus, Rapid7, Splunk, Xacta
• Microsoft Office suite (Excel, PowerPoint, Word), Microsoft Windows, Enterprise Linux variants
• AWS, Microsoft Azure

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position: eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and share in company results
• Potential eligibility for Long Term Incentives for employees in Vice President or Director positions

Additional Details

• Location: Chantilly, VA (onsite)
• Travel: Yes, 10% of the time
• Relocation assistance: No relocation assistance available
• Application period: Estimated 20 days from the job posting date; timeline may be shortened or extended based on business needs and candidate availability