Principal / Sr Principal Cybersecurity Analyst - 19526 - Roy Utah

Northrop Grumman; Roy (UT); On-site; USD 98,000 - 184,000; Full time

Job summary

Northrop Grumman is seeking a Principal/Senior Principal Cyber Analyst to support IT hardware lifecycle planning and strict hardware accountability at our Roy, Utah site. The role focuses on C-SCRM compliance with DoD guidance, NIST standards, and secure supply chain processes.

The candidate will work onsite full-time, ensuring an unbroken chain of custody, authenticated inventory, and auditable records while collaborating with security teams to address supply chain vulnerabilities.

Qualifications

• 3+ years in IT asset management (ITAM) within a DoD-regulated environment.
• Working knowledge of NIST SP 800-161 (C-SCRM) and NIST SP 800-53 (Configuration Management).
• Ability to obtain and maintain U.S. Government Secret clearance and SAP/SAR access.

Responsibilities

• Execute supplier tiering and risk profiling during procurement to ensure hardware originates from trusted OEMs.
• Inspect inbound IT shipments for tampering, counterfeit parts, or altered serial configurations.
• Maintain continuous operational evidence of C-SCRM controls for DoD audits.
• Log, serialize, and apply asset tags to establish an unbroken chain of custody.

Skills

IT Asset Management

NIST SP 800-161 (C-SCRM)

DoD SCRM regulations

Security+ CE certification

Education

Master's Degree

Bachelor's Degree

Tools

ServiceNow

Jira Service Management

CMDB platforms / ITAM tooling

Job description

RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

The Northrop Grumman CIDO Classified Solutions team is seeking a Principal/Senior Principal Cyber Analyst to support IT hardware lifecycle planning, strict hardware accountability and rigorous Cybersecurity Supply Chain Management (C-SCRM) compliance. It directly aligns with Department of Defense (DoD) instructions and NIST Special Publications (SP) 800-53 (CM-8) and 800-161. The selected candidate will be required to work on-site, full-time at our Roy, Utah location.

Supply Chain Compliance & Risk Management

• Execute supplier tiering and risk profiling during procurement to ensure hardware originates from trusted, vetted OEMs.
• Inspect inbound IT shipments for signs of supply chain tampering, counterfeit parts, or altered hardware serial configurations.
• Maintain continuous operational evidence of C-SCRM controls to satisfy rigorous third-party federal and DoD compliance audits.
• Partner with security teams to immediately isolate or flag hardware batches affected by global supply chain vulnerability.

Hardware Lifecycle Planning & Chain of Custody

• Enforce security and tracking controls directly within the vendor hardware onboarding pipeline.
• Log, serialize, and apply physical or digital asset tags to components immediately upon delivery to establish an unbroken chain of custody.
• Maintain a pristine, automated inventory baseline linked to change-management workflows, ensuring no unapproved field modifications occur.
• Manage the end-of-life process through NSA-approved data destruction methods and certified e-waste partners, gathering verifiable Certificates of Destruction.

System Inventory & Audit Accountability

• Operate and update the central Configuration Management Database (CMDB) or IT Asset Management (ITAM) platform as the single source of truth.
• Conduct strict, periodic cycle counts and blind physical audits across secure storage facilities and remote environments.
• Investigate and document any data mismatches between physical stock and digital ledger entries, escalating systemic variances to the C-SCRM Program Management Office.

Note: Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options.

Basic Qualifications For Level 3

• Master's Degree with 3 years of experience; OR a Bachelor's Degree with 5 years of experience; OR an Associate's Degree with 7 years of experience; OR a High School Diploma (or equivalent) with 9 years of experience is required

Basic Qualifications For Level 4

• Master's Degree with 6 years of experience; OR a Bachelor's Degree with 8 years of experience; OR an Associate's Degree with 10 years of experience; OR a High School Diploma (or equivalent) with 12 years of experience is required

Additional Basic Qualifications

• 3+ years in IT asset management (ITAM), hardware logistics, or inventory control within a DoD-regulated environment, defense industrial base (DIB), or federal agency.
• Demonstrable working knowledge of NIST SP 800-161 (C-SCRM), NIST SP 800-53 (specifically Configuration Management controls), and DoD SCRM regulations.
• Candidates must be able to obtain the U.S. Government 8140 requirements for the job role – such as CompTIA Security+ CE certification
• Candidates must have the ability to obtain and maintain a U.S. Government Secret (at a minimum) security clearance within a reasonable amount of time.
• Candidates must have the ability to obtain, and maintain, access to Special Access Programs as a condition of continued employment

Preferred Qualifications

• 9 years with a bachelor's degree, 7 years with a Masters, 4 years with a PhD
• Active Secret, Top Secret, SCI, SAP/SAR access, or Polygraph
• Security+ CE certification
• Advanced hands-on experience with enterprise ITAM/CMDB platforms (e.g., ServiceNow, Jira Service Management, or federal-grade tracking systems) integrated with automated discovery tools
• Expert capability to identify, categorize, and document enterprise-level tech components, including servers, switches, cryptographic modules, and end-user devices.
• Proven experience executing high-security intake, secure warehouse handling, and strict logistics documentation.

CIDO

Primary Level Salary Range: $98,400.00 - $147,600.00

Secondary Level Salary Range: $122,800.00 - $184,200.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.