Secret-Cleared Cyber Systems Engineer (L2/L3) – RMF Focus

ngc; Colorado Springs (CO); On-site; USD 92,000 - 171,000; Full time

Job summary

Northrop Grumman Space Sector in Colorado Springs, CO is seeking a Cyber Systems Engineer at Level 2 or Level 3. You will assess systems, maintain RMF artifacts, and support security authorizations at a Colorado airport facility.

Required: active Secret clearance and IAT II certification; experience with RMF, STIG, and vulnerability tooling; ability to work with government personnel and SPO contractors.

Qualifications

• Active U.S. Government Secret clearance required.
• DoD 8570.01M IAT II certification (Security+ CE, CCNA Security, GSEC, SSCP).
• Experience with cybersecurity, RMF, risk management, vulnerability management, and system hardening.
• Experience with cybersecurity frameworks and assessment tools.
• Experience with RMF artifacts and ATO processes.
• Knowledge of STIG/SCAP compliance scanning and automation (Ansible/Python).

Responsibilities

• Assess systems and networks for deviations from configurations and policies using STIG/SCAP tools.
• Document security testing plans, test cases, and RMF artifacts; support RMF/SAR/RAR.
• Maintain RMF body of evidence and eMASS records.
• Prepare POA&M artifacts and action plans; update RMF artifacts.
• Coordinate across program teams to address RMF deficiencies.
• Implement government policy guidance (DoD, NIST) and tailor processes.
• Perform cybersecurity analyses to validate controls and safeguards.
• Support authorization activities and procure required approvals.

Skills

Security clearance

IAT II certification

RMF cybersecurity

Cybersecurity frameworks

Linux administration

STIG hardening

Jira

ACAS/Nessus/Tenable

eMASS

Cross-Domain / CDSE knowledge

Education

Bachelor's degree

Master's degree

PhD

Tools

Evaluate-STIG

STIG Manager

Xylok

EMASS

Nessus

tenable.sc

ACAS

RHEL security tooling

Job description

Northrop Grumman Space Sector in Colorado Springs, CO is seeking a Cyber Systems Engineer at Level 2 or Level 3. You will assess systems, maintain RMF artifacts, and support security authorizations at a Colorado airport facility.

Required: active Secret clearance and IAT II certification; experience with RMF, STIG, and vulnerability tooling; ability to work with government personnel and SPO contractors.