Principal / Sr Principal Cybersecurity Analyst - 19526 - Roy Utah

Posted 10 Days Ago
Be an Early Applicant
Roy, UT, USA
In-Office
98K-184K Annually
Senior level
Aerospace • Logistics • Security • Software • Cybersecurity
The Role
Manages cybersecurity supply chain risk and IT hardware throughout the asset lifecycle, including supplier risk profiling, shipment inspection, chain-of-custody tracking, inventory management, audits, vulnerability response, and secure decommissioning. Maintains CMDB or ITAM systems, investigates inventory discrepancies, supports DoD and federal compliance audits, and ensures adherence to NIST, DoD SCRM, and configuration management requirements. This is a full-time, on-site role requiring a Secret clearance and potential Special Access Program access.
Summary Generated by Built In
RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Secret

TRAVEL: Yes, 10% of the TimeDescription

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

The Northrop Grumman CIDO Classified Solutions team is seeking a Principal/Senior Principal Cyber Analyst to support IT hardware lifecycle planning, strict hardware accountability and rigorous Cybersecurity Supply Chain Management (C-SCRM) compliance. It directly aligns with Department of Defense (DoD) instructions and NIST Special Publications (SP) 800-53 (CM-8) and 800-161. The selected candidate will be required to work on-site, full-time at our Roy, Utah location.

The Cyber Analyst establishes full transparency, security, and strict accountability for all information and communications technology (ICT) hardware assets. This role spans the entire asset lifecycle: secure procurement, chain-of-custody tracking, deployment, continuous monitoring, and compliant decommissioning. The officer mitigates foundational supply chain threats—such as counterfeit components, unauthorized tampering, and malicious firmware—while strictly maintaining the baseline system inventory mandated by DoD frameworks.

Supply Chain Compliance & Risk Management

• Execute supplier tiering and risk profiling during procurement to ensure hardware originates from trusted, vetted OEMs.

• Inspect inbound IT shipments for signs of supply chain tampering, counterfeit parts, or altered hardware serial configurations.

• Maintain continuous operational evidence of C-SCRM controls to satisfy rigorous third-party federal and DoD compliance audits.

• Partner with security teams to immediately isolate or flag hardware batches affected by global supply chain vulnerability.

Hardware Lifecycle Planning & Chain of Custody

• Enforce security and tracking controls directly within the vendor hardware onboarding pipeline.

• Log, serialize, and apply physical or digital asset tags to components immediately upon delivery to establish an unbroken chain of custody.

• Maintain a pristine, automated inventory baseline linked to change-management workflows, ensuring no unapproved field modifications occur.

• Manage the end-of-life process through NSA-approved data destruction methods and certified e-waste partners, gathering verifiable Certificates of Destruction.

System Inventory & Audit Accountability

• Operate and update the central Configuration Management Database (CMDB) or IT Asset Management (ITAM) platform as the single source of truth.

• Conduct strict, periodic cycle counts and blind physical audits across secure storage facilities and remote environments.

• Investigate and document any data mismatches between physical stock and digital ledger entries, escalating systemic variances to the C-SCRM Program Management Office.

Note: Due to the classified nature of the work being performed, this position does not offer any virtual or telecommute working options. Applicants are encouraged to apply only if they are willing to work on-site. 

Basic Qualifications for Level 3:

  • Master's Degree with 3 years of experience; OR a Bachelor's Degree with 5 years of experience; OR an Associate's Degree with 7 years of experience; OR a High School Diploma (or equivalent) with 9 years of experience is required 

Basic Qualifications for Level 4:

  • Master's Degree with 6 years of experience; OR a Bachelor's Degree with 8 years of experience; OR an Associate's Degree with 10 years of experience; OR a High School Diploma (or equivalent) with 12 years of experience is required  

Additional Basic Qualifications:

  • 3+ years in IT asset management (ITAM), hardware logistics, or inventory control within a DoD-regulated environment, defense industrial base (DIB), or federal agency.

  • Demonstrable working knowledge of NIST SP 800-161 (C-SCRM), NIST SP 800-53 (specifically Configuration Management controls), and DoD SCRM regulations.

  • Candidates must be able to obtain the U.S. Government 8140 requirements for the job role – such as CompTIA Security+ CE certification

  • Candidates must have the ability to obtain and maintain a U.S. Government Secret (at a minimum) security clearance within a reasonable amount of time.

  • Candidates must have the ability to obtain, and maintain, access to Special Access Programs as a condition of continued employment

 

Preferred Qualifications: 

  • 9 years with a bachelor's degree, 7 years with a Masters, 4 years with a PhD

  • Active Secret, Top Secret, SCI, SAP/SAR access, or Polygraph

  • Security+ CE certification  

  • Advanced hands-on experience with enterprise ITAM/CMDB platforms (e.g., ServiceNow, Jira Service Management, or federal-grade tracking systems) integrated with automated discovery tools

  • Expert capability to identify, categorize, and document enterprise-level tech components, including servers, switches, cryptographic modules, and end-user devices.

  • Proven experience executing high-security intake, secure warehouse handling, and strict logistics documentation.

CIDO

Primary Level Salary Range: $98,400.00 - $147,600.00Secondary Level Salary Range: $122,800.00 - $184,200.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.

Skills Required

  • Master’s degree and 3 years of experience, or bachelor’s degree and 5 years, or associate’s degree and 7 years, or high school diploma and 9 years for Level 3
  • Master’s degree and 6 years of experience, or bachelor’s degree and 8 years, or associate’s degree and 10 years, or high school diploma and 12 years for Level 4
  • At least 3 years of IT asset management, hardware logistics, or inventory control experience in a DoD-regulated, defense industrial base, or federal environment
  • Working knowledge of NIST SP 800-161, NIST SP 800-53 configuration management controls, and DoD SCRM regulations
  • Ability to obtain U.S. Government 8140 qualifications, such as CompTIA Security+ CE certification
  • Ability to obtain and maintain a U.S. Government Secret security clearance
  • Ability to obtain and maintain Special Access Program access
  • Nine years of experience with a bachelor’s degree, seven years with a master’s degree, or four years with a PhD
  • Active Secret, Top Secret, SCI, SAP/SAR access, or polygraph
  • Security+ CE certification
  • Advanced experience with enterprise ITAM or CMDB platforms such as ServiceNow or Jira Service Management
  • Expertise identifying, categorizing, and documenting enterprise technology components
  • Experience with high-security intake, secure warehouse handling, and logistics documentation

Northrop Grumman Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Northrop Grumman and has not been reviewed or approved by Northrop Grumman.

  • Retirement Support 401(k) matching is considered strong, with additional defined-benefit coverage for certain cohorts and options like catch-up contributions. Retirement programs are repeatedly highlighted as a core strength of the total rewards.
  • Leave & Time Off Breadth PTO, company-paid holidays, and compressed work schedules (such as 9/80) provide meaningful time away and flexibility. These scheduling options are cited as a major quality-of-life benefit across many locations.
  • Parental & Family Support Paid parental leave alongside caregiver leave, adoption assistance, and back-up care supports a range of family needs. These programs have been expanded recently, signaling continued investment in family support.

Northrop Grumman Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Charlotte, North Carolina
85,636 Employees

What We Do

We are a close-knit community of big thinkers collaborating to keep the world safe. Our passion, creativity and expertise bring next-level technology solutions to life in autonomous systems, cyber, C4ISR, strike, space, and logistics and modernization for our customers around the globe. On the Northrop Grumman team, you’ll join our pursuit of excellence immersed in a dynamic culture of innovation and respect. Your unique perspective will help achieve our shared vision for the future of global security. Every step of the way, you'll be supported by world-class training, employee resource groups and a comprehensive benefits package that enables greater health and happiness for you and your family. Worldwide and across disciplines, we’re challenging what’s possible for technology to protect people and places from undersea to outer space and into cyberspace. And we see the impact of our performance every day. We are Northrop Grumman, and we work on what matters—now, you too can make a difference. Explore opportunities in engineering, IT, manufacturing, business management, cybersecurity and more with us. Northrop Grumman is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer.

Similar Jobs

Wipfli Logo Wipfli

Director - Transaction Advisory Services

Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Remote or Hybrid
United States
2900 Employees
142K-212K Annually

Wipfli Logo Wipfli

Audit Manager, Technology Industry

Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Remote or Hybrid
United States
2900 Employees
97K-145K Annually

Wipfli Logo Wipfli

Manager, Accounting Advisory - Manufacturing Industry

Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Remote or Hybrid
United States
2900 Employees
107K-160K Annually

Wipfli Logo Wipfli

Transaction Advisory Services Manager

Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
Remote or Hybrid
United States
2900 Employees
117K-158K Annually

Similar Companies Hiring

Onshore Thumbnail
Artificial Intelligence • Fintech • Software • Financial Services
New York, New York
60 Employees
Revel.io Thumbnail
Aerospace • Hardware • Robotics • Software
US
50 Employees
Blee Thumbnail
Artificial Intelligence • Marketing Tech • Software • Productivity
US
15 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account