Principal Cybersecurity Analyst

Cybersecurity Jobs; Roy (UT); On-site; USD 98,000 - 148,000; Full time

Benefits offered by this job

Exceptional benefits/healthcare

9/80 work schedule

401k matching program

Flexible work arrangements

Health insurance coverage

Life and disability insurance

Savings plan

Company paid holidays

PTO for vacation/personal use

Annual bonuses

Job summary

Cybersecurity Jobs in Roy, UT is seeking a Principal Classified Cybersecurity Analyst to manage lifecycle security and ensure secure, policy-compliant data transfer between classified and unclassified networks.

You will lead A&A and ST&E activities, prepare documentation like SSPs and POA&Ms, and ensure audits and continuous monitoring align with government requirements. On-site in Roy with a Secret clearance preferred.

Qualifications

• Master’s Degree with 3 years of experience; or Bachelor’s Degree with 5 years of experience; or Associate’s Degree with 7 years of experience; or High School Diploma (or equivalent) with 9 years of experience.
• Meet U.S. Government 8140 requirements for a Cybersecurity (722) (examples include Security+ CE, CySA+, GICSP, GSEC, CND, SSCP).
• Have a current U.S. Government Top Secret security clearance (at a minimum), including a closed investigation date completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
• Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Responsibilities

• Manage the cybersecurity program for all assigned information systems and complete all cybersecurity-related tasks.
• Lead regular reviews of system audits and continuous monitoring activities across security controls and configurations to improve the information system security posture.
• Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
• Analyze and validate security requirements and recommend additional requirements and safeguards.
• Implement government policy requirements, including recommendations on process tailoring, and participate in and document process activities.
• Establish and oversee program control processes to mitigate risk and support Assessment and Authorization (A&A), including: process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Lead required Security Test and Evaluation (ST&E) efforts through pre-test preparations, test participation, results analysis, and report preparation for each government accrediting authority.
• Document A&A results and inspection outcomes, including technical or corrective actions, and collaborate with the security team to submit responses to the appropriate cognizant authority.
• Prepare, review, and submit A&A documentation for review and approval, including System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, Plan of Action and Milestones (POA&Ms), and related materials.

Skills

Cross Domain Solutions (CDS)

ACAS

Nessus

Splunk

Trellix

SCAP

RMF

NIST

JSIG

DAAG

SSPs

POA&Ms

SCTMs

Security+ CE

CySA+

GICSP

GSEC

CND

SSCP

Education

Master’s Degree

Bachelor’s Degree

Associate’s Degree

High School Diploma

Tools

CDS

ACAS

Nessus

Splunk

Trellix

SCAP

RMF

NIST

JSIG

DAAG

SSPs

POA&Ms

SCTMs

Security+ CE

CySA+

GICSP

GSEC

CND

SSCP

Job description

Principal Classified Cybersecurity Analyst role focused on lifecycle support and secure, policy-compliant data transfer between classified and unclassified networks.

Responsibilities

• Manage the cybersecurity program for all assigned information systems and complete all cybersecurity-related tasks.
• Lead regular reviews of system audits and continuous monitoring activities across security controls and configurations to improve the information system security posture.
• Assess systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
• Analyze and validate security requirements and recommend additional requirements and safeguards.
• Implement government policy requirements, including recommendations on process tailoring, and participate in and document process activities.
• Establish and oversee program control processes to mitigate risk and support Assessment and Authorization (A&A), including: process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Lead required Security Test and Evaluation (ST&E) efforts through pre-test preparations, test participation, results analysis, and report preparation for each government accrediting authority.
• Document A&A results and inspection outcomes, including technical or corrective actions, and collaborate with the security team to submit responses to the appropriate cognizant authority.
• Prepare, review, and submit A&A documentation for review and approval, including System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, Plan of Action and Milestones (POA&Ms), and related materials.

Requirements

• Education and experience (required): Master’s Degree with 3 years of experience; or Bachelor’s Degree with 5 years of experience; or Associate’s Degree with 7 years of experience; or High School Diploma (or equivalent) with 9 years of experience.
• Meet U.S. Government 8140 requirements for a Cybersecurity (722) (examples include Security+ CE, CySA+, GICSP, GSEC, CND, SSCP).
• Have a current U.S. Government Top Secret security clearance (at a minimum), including a closed investigation date completed within the last 6 years, or be enrolled in the U.S. Government Continuous Evaluation (CE) Program.
• Ability to obtain and maintain access to Special Access Programs as a condition of continued employment.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity or a related field.
• Experience in cybersecurity compliance (example: Assessment & Authorization under RMF).
• Knowledge of security tools including ACAS, Nessus, Splunk, Trellix, and SCAP.
• Knowledge of security frameworks and documentation including NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.
• Proven experience designing, implementing, and supporting Cross Domain Solutions (CDS) for secure data transfer across classified networks.

Technologies

• Cross-Domain Solutions (CDS)
• ACAS
• Nessus
• Splunk
• Trellix
• SCAP
• RMF
• NIST
• JSIG
• DAAG
• SSPs
• POA&Ms
• SCTMs
• Security+ CE
• CySA+
• GICSP
• GSEC
• CND
• SSCP

Benefits

• Exceptional benefits/healthcare
• 9/80 work schedule
• 401k matching program
• Flexible work arrangements
• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and share in company results
• Employees in Vice President or Director positions may be eligible for Long Term Incentives

Job Details

• Location: Roy, UT (onsite)
• Salary: USD 98,400 - 147,600 per yearly
• Clearance required for start: Yes
• Clearance type: Secret
• Travel: Yes, 10% of the Time
• Relocation assistance: No relocation assistance available
• On-site/telecommute: Due to the classified nature of the work, no virtual or telecommute options; applicants should be willing to work on-site.
• U.S. citizenship required: U.S. Citizenship is required for positions with a government clearance and certain other restricted positions.
• Application period: Estimated to be 20 days from the job posting date.