Cyber Systems Lead Engineer Top Secret Cloud Security

Northrop Grumman; Chantilly (VA); On-site; USD 125,300 - 187,900; Full time

Benefits offered by this job

Health insurance

Savings plan

Paid holidays

Paid time off

Job summary

Northrop Grumman in Sterling and Chantilly, VA is seeking a Mid-Level Cybersecurity Professional to lead cybersecurity for mission-critical ground segment cloud infrastructure within an Agile environment, reporting to the program cybersecurity lead.

You will collaborate with integrated product teams to develop and decompose software security requirements, guide secure coding practices, and help achieve RMF accreditation and sustainment of a private cloud.

Qualifications

• Bachelor’s Degree (STEM) with 5+ years of relevant experience, or a Master’s Degree (STEM) with 3+ years, or a PhD (STEM) with 1+ year.
• Active Top Secret clearance, SCI eligible, and U.S. citizenship required.
• Experience with Cloud Security, RMF/NIST controls, and software development lifecycle.

Responsibilities

• Lead design, development, and deployment of secure ground systems within an Agile framework.
• Communicate security requirements with space vehicle vendors and support system accreditation.
• Advise Scrum teams on secure coding, CI/CD, and security trade studies.
• Develop and implement security tooling and automation (SCA, vulnerability scanning, ConMon).
• Produce RMF artifacts: SSP, RAR, SCTM, POA&Ms and security policies.

Skills

Cloud Security

SwDLC

Technical Leadership

Mentorship

Zero-Trust

C/C++

Python

Java

NIST 800-37

Education

Bachelor’s Degree (STEM)

Master’s Degree (STEM)

PhD (STEM)

Tools

Fortify SCA

Job description

Northrop Grumman in Sterling and Chantilly, VA is seeking a Mid-Level Cybersecurity Professional to lead cybersecurity for mission-critical ground segment cloud infrastructure within an Agile environment, reporting to the program cybersecurity lead.

You will collaborate with integrated product teams to develop and decompose software security requirements, guide secure coding practices, and help achieve RMF accreditation and sustainment of a private cloud.