Classified Cybersecurity Analyst

About the Role

The Northrop Grumman CIDO Classified Solutions team is seeking a Classified Cybersecurity Analyst to support information system lifecycle activities. This position requires full-time, on-site work at our Cincinnati, OH location.

Key Responsibilities

• Conduct system audits and continuous monitoring activities, covering all security controls, configurations, and operational processes to evaluate the security posture of the information systems.
• Perform assessments of systems and networks within the networking environment or enclave and identify deviations from acceptable configurations, enclave policy, or local policy.
• Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Assist in the implementation of required government policy, make recommendations on process tailoring, and participate in and document process activities.
• Work within strict program control processes to ensure mitigation of risks and support the Assessment and Authorization (A&A) of systems, including process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging-technology research, inspections, and periodic audits.
• Support formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Document the results of A&A activities, and technical or coordination activities, and prepare the Risk Management Framework body of evidence.

Requirements & Tech Stack

• Secret security clearance required for start.
• Travel: Yes, 10% of the time.
• On-site requirement: Full-time, on-site at Cincinnati, OH location. No virtual or telecommute options.

Qualifications

• Master’s degree with 0 years of experience, OR a Bachelor's degree with 2 years of experience, OR an Associate’s degree with 4 years of experience; a High School diploma or equivalent with 6 years of experience may be considered in lieu of a completed degree.
• Current U.S. Government Secret security clearance (minimum), with a closed investigation date completed within the last 6 years, OR enrollment in the U.S. Government Continuous Evaluation (CE) Program.
• Must obtain and maintain a Special Access Program (SAP/SAR) clearance.
• Must meet U.S. Government 8140 requirements for a Cybersecurity Analyst – Security+.
• If a current Security+ certification is not held, it must be obtained within 90 days of hire.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity or related field.
• Experience in cybersecurity compliance (e.g., Assessment & Authorization under RMF).
• Knowledge of security tools such as ACAS, Nessus, EMASS, Splunk, Trellix, and SCAP.
• Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs.