Principal Cybersecurity Analyst — TS/SCI ISSO (DoD)

Northrop Grumman Corp. (AU); Kentucky; On-site; USD 83,000 - 155,000; Full time

Job summary

Northrop Grumman is seeking a Cybersecurity Analyst to serve as ISSO, overseeing certifications, incident response, and training within a security-focused team. The role emphasizes DoD clearance readiness and hands-on work with security tools across operating systems, networks, and databases.

The position requires a STEM degree with relevant experience and active Top Secret/SCI eligibility, plus familiarity with Nessus, SIEM, and risk mitigation.

Qualifications

• Bachelor's or Master's in a STEM field with demonstrated related experience.
• Active DoD Top Secret/SCI clearance is required or must be able to obtain.
• IAT Level II cert such as SecurityX or Security+ and OS/network security knowledge.
• Understanding of security tech: IDS/IPS, SIEM, vulnerability scanners, antivirus.
• Familiarity with DoD systems and compliance requirements is a plus.

Responsibilities

• Serve as ISSO and manage software and information system certifications.
• Coordinate incident response and cybersecurity training activities.
• Maintain and update cybersecurity websites and documentation.
• Support security tool usage and incident remediation efforts.

Skills

IAT Level II

Security+ CASP+

Windows/Linux security

Databases SQL/Oracle

Routers & Switches

IDS/IPS

SIEM

Vulnerability scanners

Antivirus solutions

Education

Bachelor's degree in STEM

Master's degree in STEM

Tools

Nessus

McAfee

Ivanti HEAT

Tanium

SolarWinds

Splunk

Job description

Northrop Grumman is seeking a Cybersecurity Analyst to serve as ISSO, overseeing certifications, incident response, and training within a security-focused team. The role emphasizes DoD clearance readiness and hands-on work with security tools across operating systems, networks, and databases.

The position requires a STEM degree with relevant experience and active Top Secret/SCI eligibility, plus familiarity with Nessus, SIEM, and risk mitigation.