Senior Principal Engineer Software - Cyber Security (San Diego CA)

Northrop Grumman; San Diego (CA); On-site; USD 142,200 - 213,400; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Overtime eligibility

Job summary

Northrop Grumman in San Diego, CA, is seeking a Senior Principal Engineer Software - Cyber Security. The role entails ensuring system designs comply with security policies, conducting risk assessments, and managing government compliance. Candidates must have a STEM-related degree and extensive experience in cybersecurity and vulnerability management, along with an active Top Secret SCI Clearance. The position offers a competitive salary ranging from $142,200 to $213,400, depending on experience and qualifications, along with various employee benefits.

Qualifications

• 8 years related engineering experience or equivalent with a Bachelor’s degree.
• Experience in cybersecurity, system vulnerability management, and implementation of security processes.
• Active U.S. Government Top Secret SCI Clearance required.

Responsibilities

• Ensure system designs are consistent with policies and compliance.
• Administer program control processes for risk mitigation.
• Support analysis and documentation of security processes.

Skills

Cybersecurity knowledge

Risk assessment

Compliance reporting

Communication skills

Compliance and vulnerability tools

Education

Bachelor’s degree in a STEM discipline

Master’s degree in a STEM discipline

PhD in a STEM discipline

DoD 8140 Cyber Workforce Qualification Program

DoD 8570 IAM Level II Certifications

Tools

Nessus

Nexpose

ACAS

RedHat

Job description

RELOCATION ASSISTANCE: Relocation assistance may be available.
CLEARANCE REQUIRED FOR START: Yes.
CLEARANCE TYPE: Top Secret.
TRAVEL: Yes, 25% of the Time.

Position Overview

Northrop Grumman Aeronautics Systems is looking to add a Senior Principal Engineer Software - Cyber Security to join our team on site in San Diego, CA. The candidate should be a self‑starter with familiarity working in an Integrated Product Team construct.

Roles And Responsibilities

• Ensure system designs and implementations are consistent with policies, requirements, and directives, including compliance with Security Technical Implementation Guides (STIG), Security Requirements Guides (SRGs), Center for Internet Security (CIS) Benchmark, Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE) and Open Web Application Security Project (OWASP). Identify cyber vulnerabilities and compliance issues.
• Administer strict program control processes to ensure mitigation of risks and support obtaining Assessment and Authorization (A&A) of systems.
• Support security process, analysis, coordination, assessment, documentation, software research.
• Provide security impacts and risk assessments of new system components and emerging technologies.
• Contribute to the implementation of the Risk Management Framework (RMF), through the required government policy (i.e., NIST SP 800‑53, NIST SP 800‑37, CNSSI, etc.), make recommendations on process tailoring, participate in and document process activities.
• Perform active evaluations such as compliance and vulnerability tests and adjudicate deviations from acceptable configurations and policies.

Basic Qualifications

• Bachelor’s Degree in a STEM discipline and 8 years of related engineering experience; OR a Master’s degree in a STEM discipline and 6 years of related experience; OR a PhD in a STEM discipline and 4 years of related experience.
• One of the following: DoD 8140 Cyber Workforce Qualification Program (CWQP), DoD 8570 IAM Level II Certifications (CompTIA SecurityX (CASP), CISSP, CSSLP).
• Experience in the field of cybersecurity including common terms, fundamental technical elements, operating system security, network security, and software security.
• Experience with development, review and approval methods to monitor and measure risk, compliance, and assurance efforts.
• Experience with system vulnerability management and security implementation as well as direct experience with DoD Assessment and Authorization (A&A) activities, security processes, and documentation/reporting using RMF, NIST, or CNSSI guidance.
• Experience using and working with fundamental information technology principles, concepts and techniques including software languages, design concepts, test methods, and integration practices.
• Must possess familiarity/knowledge of both Windows and UNIX based platforms (e.g., RedHat), hypervisor, and containerized environments as well as basic systems engineering principles and concepts.
• Experience with compliance and vulnerability reporting tools (Nessus, Nexpose, SCAP, ACAS, Nmap, SAST, DAST).
• Strong organizational and communication skills and experience working with stakeholders at a variety of levels across organizations.
• Active U.S. Government Top Secret SCI Clearance (with a background investigation within the past 5 years or enrolled into Continuous Evaluation).
• Ability to obtain and maintain Special Program Access (SAP/PAR). This SAP/PAR must be obtained prior to commencement of employment and within a reasonable amount of time as determined by the company to meet its business needs.

Preferred Qualifications

• Current applicable Special Access Program (SAP) clearance.
• Systems security experience and one of the following higher-level certifications: CISSP-ISSEP, CISSP-ISSAP, CSSLP.
• Experience with the implementation of NIST special publications, federal regulations, and DoD policies.
• Experience in documenting the security posture of an information system and reporting on security controls assigned to the system.
• Experience submitting authorization content and artifacts to support authorizing authority’s ongoing assessment and risk acceptance decisions.
• Experience performing complex security information technology tasks independently and validating security assessments and reviews.
• Experience applying security hardening to information systems and networks under the guidance of the RMF.
• Designs, develops, tests, and evaluates information systems throughout the systems development lifecycle.

Benefits and Compensation

Primary Level Salary Range: $142,200.00 – $213,400.00. Employees may be eligible for overtime, shift differential, discretionary bonus, and various benefits including health insurance, life and disability insurance, a savings plan, company paid holidays, and paid time off. The role may also involve a 9/80 schedule and 401(k) matching program.

Equal Opportunity Statement

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. U.S. citizenship is required for all positions with a government clearance and certain other restricted positions. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO.