Staff Cybersecurity Analyst - RMF/NIST Lead (Secret)

Northrop Grumman Corp.; Roy (UT); On-site; USD 153,000 - 229,000; Full time

Benefits offered by this job

Medical, Dental & Vision coverage

401k

Educational Assistance

Life Insurance

Employee Assistance Programs & Work/Li

Paid Time Off

Health & Wellness Resources

Employee Discounts

Job summary

Northrop Grumman Defense Systems is seeking a Staff Cybersecurity Analyst in Roy, UT to serve as a primary technical authority and ISSE for security architecture and RMF compliance. You will translate NIST SP 800-53 controls into scalable baselines and drive continuous monitoring solutions across enterprise and mission environments.

You will lead ST&E planning, POA&M management, and security artifact preparation for ATO assessments, while mentoring junior engineers in risk methodologies and DoD

Qualifications

• Experience implementing NIST SP 800-53 security controls across complex architectures.
• Ability to tailor CNSSI 1253 baselines and DoD RMF controls for ATO readiness.
• Strong background in system hardening across Windows Server, RHEL, storage and virtualized/cloud environments.
• Proven ability to develop and audit security artifacts for RMF and NIST compliance.

Responsibilities

• Lead engineering and tailoring of NIST SP 800-53 controls across complex architectures.
• Define parameters and control implementations to meet AO and SCA risk tolerances.
• Architect and implement system hardening baselines across diverse environments.
• Lead ST&E planning, POA&M management, BoE compilation, and ATO packages.
• Mentor engineers in risk assessment and compliance frameworks.

Skills

NIST SP 800-53

CNSSI 1253

RMF knowledge

Security Architecture

DevSecOps

SIEM Splunk

Education

Bachelor’s Degree

Master’s Degree

PhD

Tools

Splunk

ACAS/Nessus

Trellix HBSS

Job description

Northrop Grumman Defense Systems is seeking a Staff Cybersecurity Analyst in Roy, UT to serve as a primary technical authority and ISSE for security architecture and RMF compliance. You will translate NIST SP 800-53 controls into scalable baselines and drive continuous monitoring solutions across enterprise and mission environments.

You will lead ST&E planning, POA&M management, and security artifact preparation for ATO assessments, while mentoring junior engineers in risk methodologies and DoD