Senior Cyber A&A Engineer, Top Secret Mission Systems

Northrop Grumman Corp.; Colorado Springs (CO); On-site; USD 114,000 - 170,000; Full time

Benefits offered by this job

Health Plan

Savings Plan

Paid Time Off

Education Assistance

Training and Development

Flexible Work Arrangements

Job summary

Northrop Grumman Space Systems – Launch and Missile Defense Systems seeks a Cyber A&A Engineer to join the C2BMC program in Colorado Springs, CO. Lead assessment & authorization activities, analyze scans, and ensure compliance with RMF and DoD requirements for mission-critical systems.

The role requires deep cybersecurity engineering expertise, DoD RMF familiarity, and collaboration with internal teams and external assessors to maintain accreditation and robust cyber posture.

Qualifications

• Bachelor’s degree or higher in a related field with relevant experience.
• Active 8140 certification at IAT Level II or higher.
• Active Top Secret clearance to start.

Responsibilities

• Perform A&A activities for continuous system authorization.
• Analyze ACAS, SCC, and ConfigOS results for vulnerabilities and gaps.
• Review RMF controls and DoD requirements; provide guidance to teams.
• Develop and maintain POA&Ms with remediation plans and residual risk docs.
• Create and maintain RMF packages using eMASS/Xacta.
• Support CDS accreditation and coordinate with security stakeholders.
• Assist with user/account management ensuring least privilege.

Skills

Cybersecurity engineering

RMF

DoD standards

Written communication

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Assurance

Master’s degree (preferred)

Tools

eMASS/Xacta

ACAS/SCC/ConfigOS

STIGs

NIST SP 800-53

Job description

Northrop Grumman Space Systems – Launch and Missile Defense Systems seeks a Cyber A&A Engineer to join the C2BMC program in Colorado Springs, CO. Lead assessment & authorization activities, analyze scans, and ensure compliance with RMF and DoD requirements for mission-critical systems.

The role requires deep cybersecurity engineering expertise, DoD RMF familiarity, and collaboration with internal teams and external assessors to maintain accreditation and robust cyber posture.