Staff RMF Cybersecurity Architect & Automation Lead

Northrop Grumman; United States; On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental & Vision coverage

401k

Educational Assistance

Life Insurance

Paid Time Off

Job summary

Northrop Grumman Space Systems is seeking a Staff Cybersecurity Analyst to serve as a primary ISSE and domain expert in system hardening, security architecture, and RMF compliance. This role is based in Roy, UT, supporting the Sentinel program with a focus on scalable, automated security baselines.

You will drive ST&E planning, vulnerability assessment, and automation using PowerShell, Python, and Ansible, collaborating with cross-functional teams to integrate cybersecurity into the total system

Qualifications

• Bachelor's Degree with 12+ years of relevant experience, or a Master's with 10+ years, or a PhD with 8+ years.
• Active U.S. Government DoD Secret security clearance at time of application, with ability to obtain SAP approval.

Responsibilities

• Lead engineering and tailoring of NIST SP 800-53 controls, CNSSI 1253, and RMF guidance across complex architectures.
• Define and enforce Organization-Defined Parameters (ODPs) and control implementations to meet AO/SCA risk tolerances.
• Architect and implement system hardening baselines across Windows, Linux, storage, virtualization, and cloud environments.
• Lead ST&E plans, POA&M management, BoE compilation, and ATO packaging.

Skills

NIST SP 800-53

CNSSI 1253

RMF

PowerShell

Python

Ansible

DevSecOps

Education

Bachelor's Degree + 12 years experience

Master's Degree + 10 years experience

PhD + 8 years experience

Tools

Tenable ACAS

Rapid7

Splunk

DISA STIG Viewer

Job description

Northrop Grumman Space Systems is seeking a Staff Cybersecurity Analyst to serve as a primary ISSE and domain expert in system hardening, security architecture, and RMF compliance. This role is based in Roy, UT, supporting the Sentinel program with a focus on scalable, automated security baselines.

You will drive ST&E planning, vulnerability assessment, and automation using PowerShell, Python, and Ansible, collaborating with cross-functional teams to integrate cybersecurity into the total system