Principal Cybersecurity Systems Engineer (CSE)

Northrop Grumman Corp. (AU); Oklahoma City (OK); On-site; USD 102,600 - 153,800; Full time

Benefits offered by this job

Relocation assistance

Job summary

Northrop Grumman Aeronautics Systems in Oklahoma City, OK, seeks a Cybersecurity Systems Engineer to assess software/hardware for vulnerabilities, develop automation for cybersecurity, and guide security architecture across development lifecycles.

You will evaluate protections, support RMF package development, and ensure verification/validation of cybersecurity capabilities within a high-security program. Eligible for SECRET clearance. Local relocation may apply.

Qualifications

• Bachelor's degree in a STEM field with 5+ years of relevant military or professional experience, OR a Master’s Degree in a STEM field with 3+ years, OR a PhD with 1 year of experience.
• Active US Government Secret or higher clearance (with background investigation in last 6 years or Continuous Evaluation).
• Ability to obtain and maintain SAP clearance as needed by business.
• Experience in Cybersecurity vulnerability assessments and evaluation; knowledge of NIST 800-53, 800-171, NSS/CSA PM 9-12 and JSIG.

Responsibilities

• Solve complex cybersecurity problems across systems and software.
• Assess software static code analysis results.
• Generate and maintain artifacts for Air Force authorization decisions.
• Perform system vulnerability scans using ACAS and STIGs.
• Verify/discuss cybersecurity protections from design through implementation.
• Develop RMF package artifacts: SSP, CMP, RA, STCM, POAM, etc.
• Participate in System Engineering events across the lifecycle.
• Support SETR events (PDR/CDR/SRR/TRR) across lifecycle.
• Implement and assess cybersecurity verification/validation methods.

Skills

Cybersecurity

RMF

Vulnerability assessment

NIST standards

Education

Bachelor's in STEM

Master's in STEM

PhD in STEM

Tools

ACAS

STIG/SC checker

Job description

RELOCATION ASSISTANCE: Relocation assistance may be available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Aeronautics Systems has an opening for a Cybersecurity Systems Engineer to join our team of qualified, diverse individuals within our Systems Engineering organization. This role is located in Oklahoma City, OK.

In this role as the Cybersecurity Systems Engineer (CSE), you will assess software and hardware for vulnerabilities, develop automation for cybersecurity processes, and investigate complex technical issues. The CSE also guides/supports the security layout / architecture and influences the security tools selection and development. You'll evaluate and assess the proposed and realized implementation to identify security risks and verify the cybersecurity protections from the design are realized and integrated. Finally, you'll guide and support the development of cybersecurity related verification efforts to ensure the cybersecurity protections / capabilities are functional, effective, and complete.

Responsibilities

• Solve complex technical problems involving cybersecurity concepts.
• Assess software static code analysis results.
• Complete Cybersecurity Impact Appraisals/Evaluations on hardware/software projects.
• Generating and maintaining appropriate artifacts for Air Force authorization decisions.
• Experience performing system vulnerability scans utilizing tools such as ACAS and STIGs.
• Experience performing manual STIG / SRG verifications on disparate types of equipment including collecting and evaluating findings.
• Perform system categorization based on impact analysis.
• Develop artifacts required for a Risk Management Framework (RMF) package: System Security Plan, Continuous Monitoring Plan, Risk Assessment Report, Security Control Traceability Matrix, Plan Of Actions & Milestones, etc.
• Participate in systems engineering events across the system development lifecycle.
• Participate in Systems Engineering Technical Review (SETR) events across the system development lifecycle including PDR, CDR, SRR, TRR.
• Implement, review and assess cybersecurity system requirements verification/validation methods.

Basic Qualifications

• Must have a Bachelors degree in a STEM field and at least 5 years of relevant military / professional experience, OR a Master’s Degree in a STEM field and at least 3 years of relevant military / professional experience, OR a PhD and at least 1 year of relevant military / professional / academic experience.
• Must have an active US Government Secret or higher clearance (with a background investigation completed within the last 6 years or currently enrolled into Continuous Evaluation).
• Must have the ability to obtain and maintain Special Access Program (SAP) clearance within a reasonable amount of time as determined by business needs.
• Must have experience in Cybersecurity vulnerability assessments and evaluation.
• Must have knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG.

Preferred Qualifications

• Program cleared (copy program access language).
• CSSLP, CISSP, CEH, Security+.
• Foundational knowledge and experience with core systems engineering principles, including:
• Requirements development, allocation, and traceability
• Verification and validation planning and execution
• Engineering Change Processes
• Experience performing cybersecurity impact assessments during design changes, capability upgrades, and/or baseline reviews.
• Experience performing system vulnerability scans utilizing tools such ACAS, and automated STIG tools such as Evaluate STIG or Security Compliance Checker.
• Experience with networking technologies, router and switch configurations, troubleshooting and security / vulnerability assessments.
• Active Top Secret clearance.

Primary Level Salary Range: $102,600.00 - $153,800.00

Benefits: Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.