Senior Principal Cybersecurity Lead: Cloud & RMF Expert

Northrop Grumman; Chantilly (VA); On-site; USD 156,400 - 234,600; Full time

Benefits offered by this job

Relocation assistance

Health insurance

Paid time off

Job summary

Northrop Grumman is seeking an Experienced Cybersecurity Professional to lead RMF activities, cloud security, and software security in a 100% Agile development environment. You will act as Deputy Cybersecurity Lead and Deputy ISSM, guiding design, architecture, and security controls across mission-critical information systems.

You will collaborate with Platform Deployment on secure infrastructure, CI/CD pipelines, and accreditation sustainment of a private cloud.

Qualifications

• Bachelor’s in STEM with 8+ yrs, or Master’s with 6+ yrs, or PhD with 4 yrs of relevant experience.
• Strong understanding of RMF/AC and cloud security controls.
• Experience with vulnerability management, SCA/SSA tools, and incident monitoring.

Responsibilities

• Lead RMF activities including A&A, continuous monitoring, and vulnerability management.
• In an Agile environment, design, develop, and implement secure systems and ensure compliance with security requirements.
• Provide cybersecurity guidance to stakeholders and oversee security tool automation and DevSecOps practices.
• Develop RMF artifacts like SSP, RAR, SCTM, and POA&Ms and support system accreditation.

Skills

RMF

A&A

Cloud security

Splunk

Leadership

CI/CD

Vulnerability management

Education

Bachelor’s STEM degree

Master’s STEM degree

PhD STEM

Tools

Fortify

SCA

Splunk

Job description

Northrop Grumman is seeking an Experienced Cybersecurity Professional to lead RMF activities, cloud security, and software security in a 100% Agile development environment. You will act as Deputy Cybersecurity Lead and Deputy ISSM, guiding design, architecture, and security controls across mission-critical information systems.

You will collaborate with Platform Deployment on secure infrastructure, CI/CD pipelines, and accreditation sustainment of a private cloud.