Jobs · Information Technology · Utah

Principal Cybersecurity Analyst - 19945 19944 19943 - Roy Utah

Northrop Grumman · Roy, UT · 1 mo ago
On-siteInformation Technology$98k–$148k/yrFull-time
We need to output HTML fragment with sections: About the role? The description includes paragraphs about company, mission, etc. We need to use

for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We must not repeat job title as heading. Must not include Job ID etc. Remove boilerplate like EEO, etc. We need to preserve all substantive information. Let's parse the posting: - Relocation assistance: No relocation assistance available - Clearance required: Yes, Secret - Travel: Yes, 10% of the Time Then description paragraphs about Northrop Grumman, mission, etc. Then "The Northrop Grumman Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities." etc. Then responsibilities list (bulleted). Then note about no virtual/telecommute. Then Basic Qualifications (list of degree/experience combos, plus 8140 requirements, Top Secret clearance, etc.) Then Preferred Qualifications (list bullet points). Then "We offer flexible work arrangements, phenomenal learning opportunities, exposure to a wide variety of projects and customers, and a very friendly team environment." etc. Also mention benefits: exceptional benefits/healthcare, a 9/80 work schedule, great 401k matching program. Then "CIDO Primary Level Salary Range: $98,400.00 - $147,600.00" plus explanation. Then benefits list: health insurance, life and disability, savings plan, company paid holidays, PTO. Then application period etc (maybe not needed? It's meta but could be considered minor metadata; we can drop or put in short p). The instruction: do NOT put Job ID/requisition numbers as headings — fold minor metadata into a short

or drop it. Application period maybe minor metadata; we could include in a short p or drop. Probably drop. We need sections: About the role (maybe the initial description about company and role?), Responsibilities, Requirements (maybe Basic Qualifications?), Qualifications (maybe Preferred Qualifications?), Skills (maybe list of skills from preferred?), Benefits, Pay, Schedule. We need to decide what content goes where. We have: - About the role: Could be the introductory paragraphs describing the role and mission. Could include the first paragraph after description: "The Northrop Grumman Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst..." plus the description of work. - Responsibilities: The bullet list under "The responsibilities of this role include, but are not limited to, the following:" and the note about no virtual/telecommute maybe part of responsibilities? Could be separate but we can include in responsibilities. - Requirements: Basic Qualifications (degree/experience, clearance, 8140, Top Secret, etc.) - Qualifications: Preferred Qualifications (bullet list) - Skills: Could be the specific skills mentioned in preferred qualifications: knowledge of security tools, frameworks, experience designing CDS, etc. Could also include the 8140 certifications? But those are requirements. We'll put skills as the list of knowledge/tools. - Benefits: The paragraph about flexible work arrangements, learning opportunities, exposure, friendly team, exceptional benefits/healthcare, 9/80 work schedule, 401k matching, plus list of benefits (health insurance, life/disability, savings plan, paid holidays, PTO). Also maybe relocation assistance note (none) but we can include as part of benefits? Probably not needed. - Pay: Salary range $98,400 - $147,600 plus explanation about factors. - Schedule: 9/80 work schedule mentioned; also travel 10% of time; maybe also note about on-site full-time. Could include schedule section with 9/80 work schedule and travel expectation. We must not create sections with filler like "commensurate with experience". We have actual content. We must not repeat job title as heading. We must not include markdown fences. We need to output only HTML fragment. Let's craft. Structure:

About the role

... paragraphs ...

Responsibilities

  • ...
  • ...

Requirements

... basic qualifications ...

Qualifications

... preferred qualifications ...

Skills

  • ...
  • ...

Benefits

  • ...
  • ...

Pay

... salary range ...

Schedule

... 9/80 work schedule, travel 10% ...

We need to ensure we include all substantive info. Let's extract exact text. About the role: Could combine the descriptive paragraphs before responsibilities. From posting: "Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. At the heart of Defining Possible is our commitment to missions. In rapidly changing global security environments, Northrop Grumman brings informed insights and secure technological solutions to enable strategic objectives. We’re looking for innovators who can help us keep building on our wide portfolio of secure, affordable, integrated, and multi-domain systems and technologies that fuel those missions. By joining in our shared mission, we will support yours by expanding your personal network and developing skills, whether you are new to the field or an industry thought leader. At Northrop Grumman, you will have the resources, support, and team to do some of the best work of your career. The Northrop Grumman Classified Solutions team is seeking a Principal Classified Cybersecurity Analyst to support information systems lifecycle activities. The selected candidate will be required to work on-site, full-time at our Roy, Utah location. We are looking for an experienced professional to design, integrate, and maintain Cross‑Domain Solutions (CDS) that enable secure, policy‑compliant data transfer between classified and unclassified networks. The role includes conducting risk assessments, configuring hardware/software, performing rigorous testing, and providing ongoing support to ensure continuous compliance with US Government security directives." We can keep that as About the role. Responsibilities bullet list: - Manage the cybersecurity program of all assigned information systems and execute all cybersecurity-related tasks. - Conduct and lead regular reviews of system audits and continuous monitoring activities, covering all security controls and configurations, to enhance operational efficiencies of the information system security posture. - Perform assessments of systems and networks within the networking environment or enclave and identify where those systems and networks deviate from acceptable configurations, enclave policy, or local policy. - Perform analyses to validate established security requirements and to recommend additional security requirements and safeguards. - Drive the implementation of the required government policy, make recommendations on process tailoring, participate in and document process activities. - Establish and oversee strict program control processes that mitigate risk and support system Assessment and Authorization (A&A). This includes process support, analysis, coordination, security certification testing, security documentation, investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits. - Lead the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results and preparation of required reports. - Document the results of A&A activities, and inspection activities, along with any technical or corrective actions and work collectively with the security team to submit responses to the appropriate cognizant authority. - Prepare, review, and submit A&A documentation (System Security Plan, Risk Acceptance Report, Security Controls Traceability Matrix, Plan of Action and Milestones, etc.) for review and approval. Also note: "Note: Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply only if they are willing to work on-site." Could be part of responsibilities or maybe a separate note but we can include as a responsibility bullet or a paragraph after list. Let's add as a bullet: "Work on-site, full-time; no virtual or telecommute options due to classified nature." Requirements (Basic Qualifications): - Master's Degree with 3 years of experience; OR a Bachelor's Degree with 5 years of experience; OR an Associate's Degree with 7 years of experience; OR a High School Diploma (or equivalent) with 9 years of experience is required - Candidates must meet the U.S. Government 8140 requirements for a Cybersecurity (722) – (Example: Security+ CE, CySA+, GICSP, GSEC, CND, SSCP) - Candidates must have a current U.S. Government Top Secret security clearance (at a minimum), to include a closed investigation date completed within the last 6 years OR must be enrolled in the U.S. Government Continuous Evaluation (CE) Program to be considered - Candidates must have the ability to obtain, and maintain, access to Special Access Programs as a condition of continued employment Also relocation assistance: No relocation assistance available (maybe include in Benefits? but it's a negative; we could include in Benefits as "No relocation assistance offered". But maybe better to include in a short p under Benefits? However we have Benefits section for positive benefits; we could note "No relocation assistance offered" as part of Benefits but it's not a benefit. Could add a short p after Benefits? But instruction: include section only when posting has real specific content. We have content about relocation assistance (none). Could include in Benefits as a note: "No relocation assistance offered." That's still specific content. We'll include. Qualifications (Preferred Qualifications): - Bachelor’s degree in Cybersecurity or related field - Experience in cybersecurity compliance (ex. Assessment & Authorization under RMF) - Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP - Knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs - Proven experience designing, implementing, and supporting Cross Domain Solutions (CDS) for secure data transfer across classified networks. Skills: Could be the knowledge of tools and frameworks etc. But we already listed them under Preferred Qualifications. To avoid duplication, we could treat Preferred Qualifications as Qualifications section, and Skills as a subset maybe of tools. But we need to avoid duplication. Perhaps we can combine Preferred Qualifications and Skills into one section called Qualifications (or Skills). However the instruction says use headings like Skills if there is content. We have content for both Preferred Qualifications and Skills (tools). To avoid duplication, we could put Preferred Qualifications under Qualifications heading, and Skills under Skills heading listing the specific tools/frameworks. But then we would duplicate the bullet points. Better to put Preferred Qualifications under Qualifications, and under Skills list the specific tools and frameworks (knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP; knowledge of security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs). Also maybe include experience designing CDS etc as skill. But that is also a qualification. We'll split: Qualifications: education/experience preferences (Bachelor's degree in Cybersecurity, experience in cybersecurity compliance, proven experience designing CDS). Skills: knowledge of tools and frameworks. Let

Similar jobs