Senior Cyber A&A Engineer – C2BMC RMF (Top Secret)

Northrop Grumman; Colorado Springs (CO); On-site; USD 114,000 - 171,000; Full time

Benefits offered by this job

Health Plan

Savings Plan

Paid Time Off

Education Assistance

Training and Development

Flexible Work Arrangements

Job summary

Northrop Grumman Space Systems in Colorado Springs seeks a Cyber Assessment & Authorization Engineer to support continuous system authorization for the C2BMC program. You will analyze vulnerabilities, interpret RMF controls, and collaborate with security stakeholders to implement effective cybersecurity measures on mission systems.

The role requires a Top Secret clearance, DoD RMF experience, and 8140 certification.

Qualifications

• Bachelor’s Degree in a related field with 5 years of experience, or Master’s with 3 years; or 9 years alternative.
• Active Government-Issued 8140 certification at IAT Level II or higher at start.
• Active Top Secret clearance at start of contract.

Responsibilities

• Perform A&A for continuous authorization of C2BMC and mission systems.
• Analyze ACAS, SCC, and ConfigOS results for vulnerabilities and gaps.
• Review STIGs and RMF controls; guide engineering and operations teams
• Develop and maintain POA&Ms with remediation plans and residual risk docs.
• Conduct risk analyses for RARs and provide leadership recommendations.
• Use eMASS/Xacta to maintain RMF packages; ensure accuracy and compliance.
• Support CDS accreditation with documentation and evidence collection.
• Coordinate with internal/external stakeholders to plan and document cybersecurity assessments.
• Assist with user/admin account management under least-privilege principles.
• Contribute to patch/configuration management and verify compliance.
• Prepare technical docs and briefings for program management and customers.

Skills

Technical writing

Verbal communication

Education

Bachelor’s degree + 5 years or Master’s + 3 years

Tools

ACAS/SCC analysis

STIGs & RMF

eMASS/Xacta

CDS accreditation

Job description

Northrop Grumman Space Systems in Colorado Springs seeks a Cyber Assessment & Authorization Engineer to support continuous system authorization for the C2BMC program. You will analyze vulnerabilities, interpret RMF controls, and collaborate with security stakeholders to implement effective cybersecurity measures on mission systems.

The role requires a Top Secret clearance, DoD RMF experience, and 8140 certification.