Principal Cybersecurity Analyst

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history. We look for people who have bold new ideas, courage, and a pioneering spirit to join forces to invent the future. Our culture thrives on intellectual curiosity, cognitive diversity, and bringing your whole self to work.

About the Role

We are seeking experienced Cybersecurity Analysts to work on-site at our Tampa, FL location. Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options. Applicants must be willing to work on-site. Relocation assistance may be available. This role requires a Top Secret clearance and involves 10% travel.

Responsibilities

• Utilize your experience with a Security Information and Event Management (SIEM) tool, preferably Splunk.
• Develop and implement Splunk queries: Create and optimize complex Splunk queries to extract, analyze, and visualize security data from diverse sources using Splunk Search Processing Language (SPL).
• Design Splunk dashboards and reports tailored to different stakeholders, providing real-time visibility into security events, trends, and key performance indicators.
• Configure and maintain Splunk infrastructure, including data inputs, parsing, field extractions, and data enrichment pipelines.
• Leverage Splunk Enterprise Security to develop and implement security use cases, correlation searches, and notable events for threat detection and analysis.
• Utilize Trellix/Endpoint Security Solutions (ESS) to detect and counter known threats.
• Collaborate with cross-functional teams, including IT, network, and application teams, to integrate Splunk with various platforms and systems.
• Investigate security incidents, anomalies, and breaches using Splunk's forensic capabilities; perform root cause analysis and incident triage.
• Document Splunk configuration, operational procedures, and security findings; prepare comprehensive reports for stakeholders.
• Stay current with industry trends, cybersecurity threats, vulnerabilities, and best practices; enhance knowledge of Splunk features through self-study and certifications.

Requirements

Cybersecurity Analyst Level

• Bachelor’s degree with 2 years of experience OR a Master’s degree with 0 years of experience.
• US Citizenship with an active DoD Top Secret/SCI security clearance.
• Must possess DoD 8570 Certification for IAT Level II or higher prior to start date.
• Experience with a Security Information and Event Management (SIEM) tool.
• Working knowledge of network security controls such as routers, switches, firewalls, and network access controls.
• Proficiency with both Linux and Windows Operating Systems.
• Knowledge of vulnerabilities, threat detection, encryption, and security audits.

Principal Cybersecurity Analyst Level

• Bachelor’s degree with 5 years of experience; OR a Master’s degree with 3 years of experience; OR a PhD with 1 year of experience.
• US Citizenship with an active DoD Top Secret/SCI security clearance.
• Must possess DoD 8570 Certification for IAT Level II or higher prior to start date.
• Experience with a Security Information and Event Management (SIEM) tool.
• Ability to collaborate with other teams to investigate security incidents and provide insights for improving security posture.
• Working knowledge of network security controls such as routers, switches, firewalls, and network access controls.
• Working knowledge of Linux and Windows Operating Systems.

Preferred Qualifications

Cybersecurity Analyst Level

• DoD 8570 Certification for IAT Level III.
• Proven experience with Splunk (or equivalent SIEM) front-end and/or back-end functionalities.
• Experience with Trellix/Endpoint Security Solutions (ESS).
• Familiarity with scripting languages such as Python, PowerShell, or Bash.
• Relevant certifications (e.g., Splunk Core Certified Power User, Splunk Enterprise Certified Admin).
• Proven knowledge of network security controls and related solutions.
• Proven knowledge of Linux and Windows operating systems and applications.
• Excellent analytical and problem-solving skills.

Principal Cybersecurity Analyst Level

• DoD 8570 Certification for IAT Level III.
• Proven experience with Splunk (or equivalent SIEM) front-end and/or back-end functionalities.
• Experience with Trellix/Endpoint Security Solutions (ESS).
• Familiarity with scripting languages such as Python, PowerShell, or Bash.
• Relevant certifications (e.g., Splunk Core Certified Power User, Splunk Enterprise Certified Admin).
• Proven knowledge of network security controls and related solutions.
• Proven knowledge of Linux and Windows operating systems and applications.
• Excellent analytical and problem-solving skills.

Pay

Primary Level Salary Range: $79,300.00 - $118,900.00

Secondary Level Salary Range: $98,400.00 - $147,600.00

The above salary range represents a general guideline. Northrop Grumman considers factors such as scope and responsibilities of the position, candidate's experience, education, skills, and current market conditions when determining base salary offers. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions and allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives.

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company paid holidays and paid time off (PTO) for vacation and/or personal business.