Principal Cyber Security Software Engineer

Northrop Grumman; San Diego (CA); On-site; USD 114,000 - 213,000; Full time

Benefits offered by this job

Health insurance

9/80 schedule

401K matching

Job summary

Northrop Grumman Aeronautics Systems seeks a Principal or Senior Principal Engineer Software - Cyber Security to join our team on site in San Diego, CA or El Segundo, CA. The candidate should be a self-starter with experience in an Integrated Product Team.

The role requires DoD cyber workforce qualifications, RMF/NIST guidance, and hands-on security assessments. A Top Secret/SCI clearance is required, with the ability to obtain SAP/PAR as needed.

Qualifications

• Bachelor’s degree in STEM with 5+ years of related engineering experience (Level 3).
• Master’s or PhD with fewer years or more: 3-4 years (Level 3/4).
• DoD 8140 CWQP or DoD IAM Level II certifications required.
• Experience with RMF/NIST/CNSSI guidance and A&A activities.
• Experience with Windows and UNIX platforms, virtualization, containers.

Responsibilities

• Ensure designs compliant with STIG, SRGs, CIS, CVE, CWE, OWASP; identify cyber vulnerabilities.
• Administer program control processes to mitigate risks and obtain A&A.
• Support security processes, analysis, documentation, and research.
• Provide security impact assessments for new components and tech.
• Contribute to RMF implementation per government policy; tailor processes.
• Conduct compliance and vulnerability tests and adjudicate deviations.

Skills

Cybersecurity knowledge

RMF/NIST experience

A&A experience

Communication skills

Windows/UNIX

Education

Bachelor’s Degree in STEM

Master’s Degree in STEM

PhD in STEM

Tools

Nessus

Nexpose

SCAP

ACAS

Nmap

SAST

DAST

Job description

Northrop Grumman Aeronautics Systems seeks a Principal or Senior Principal Engineer Software - Cyber Security to join our team on site in San Diego, CA or El Segundo, CA. The candidate should be a self-starter with experience in an Integrated Product Team.

The role requires DoD cyber workforce qualifications, RMF/NIST guidance, and hands-on security assessments. A Top Secret/SCI clearance is required, with the ability to obtain SAP/PAR as needed.