Senior Cyber A&A Engineer (RMF)

0090 CORP-Corporate Office; United States; On-site; USD 114,000 - 171,000; Full time

Benefits offered by this job

Health Plan

Savings Plan

Paid Time Off

Education Assistance

Training and Development

Flexible Work Arrangements

Job summary

Northrop Grumman Space Systems—Missile Defense Integration seeks a Principal Cyber A&A Engineer to join the C2BMC program in Colorado Springs, CO. The role focuses on continuous system authorization, applying RMF, NIST SP 800-53 controls, and supporting accreditation activities.

You will collaborate with internal teams and external assessors to plan, execute, and document cybersecurity assessments, maintaining strong cyber hygiene and precise documentation.

Qualifications

• Bachelor’s degree in a related field; 5+ years experience, or Master’s with 3+ years, or 9 years in lieu of degree
• Active Government-issued 8140 certification at IAT Level II or higher
• Active Top Secret clearance at start date; DoD RMF experience required
• Experience applying RMF, NIST SP 800-53 security controls; strong engineering background

Responsibilities

• Perform A&A activities supporting continuous system authorization for C2BMC and mission systems
• Analyze ACAS, SCC, and ConfigOS results for vulnerabilities and control gaps
• Review and validate RMF controls and DoD requirements; provide guidance to teams
• Develop POA&Ms with remediation plans and residual risk documentation
• Create and maintain RMF packages in eMASS/Xacta; ensure accuracy and compliance

Skills

RMF

A&A

NIST SP 800-53

ACAS/SCC/ConfigOS

eMASS/Xacta

Vulnerability scanning

Education

Bachelor’s Degree in Computer Science, Cybersecurity Engineering, Information Assurance, Engineering, Mathematics, Physics, or related field

Tools

eMASS/Xacta

ACAS/SCC/ConfigOS

STIGs

Job description

Northrop Grumman Space Systems—Missile Defense Integration seeks a Principal Cyber A&A Engineer to join the C2BMC program in Colorado Springs, CO. The role focuses on continuous system authorization, applying RMF, NIST SP 800-53 controls, and supporting accreditation activities.

You will collaborate with internal teams and external assessors to plan, execute, and document cybersecurity assessments, maintaining strong cyber hygiene and precise documentation.