Sr Principal Cyber Systems Engineer – Cybersecurity (ISSE) (26-431) AHT

Northrop Grumman; Colorado Springs (CO); On-site; USD 142,000 - 213,000; Full time

Benefits offered by this job

Health Plan

Savings Plan

Paid Time Off

Education Assistance

Training and Development

Flexible Work Arrangements

Job summary

Northrop Grumman Space Systems—Missile Defense Integration offers an excellent opportunity for an NG-Only Sr. Principal Cyber Systems Engineer – Cybersecurity (ISSE) Engr to join our team at Schriever Space Force Base, CO. This on-site role supports the C2BMC program and requires active Top Secret clearance and DoD cybersecurity expertise.

Responsibilities include implementing endpoint protection, SIEM, STIGs, and data pipelines, plus collaboration with ISSOs. Travel up to 10% may be required.

Qualifications

• Bachelor’s degree in computer science or related field with extensive experience in cybersecurity
• Active government-issued DoD 8140 IAT Level II/IAM Level I or higher certification
• Must hold Top Secret clearance to start and maintain it throughout
• Willingness to travel 10% of the time for business needs
• Experience with Windows and Linux system administration
• Experience installing and administering SIEM, endpoint protection, and vulnerability scanning tools
• Knowledge of NIST DoD guidance and STIG assessments
• Experience with scripting and automation for large-scale deployments

Responsibilities

• Install, configure, and administer cybersecurity software focusing on endpoints and monitoring
• Perform vulnerability and compliance scanning
• Write and maintain scripts to deploy cybersecurity agents in a large virtualized environment
• Analyze endpoint protection events to reduce false positives and improve auditing
• Perform STIG assessments for Windows, RHEL, virtualization, and endpoints
• Write queries and dashboards in SIEM to visualize security data
• Create data pipelines to parse ingested data and add metadata for reporting
• Assist ISSOs with CVT prep, remediation, and POA&M responses

Skills

Cybersecurity

Endpoint protection

Vulnerability scanning

Scripting

STIG assessments

SIEM queries

Data pipelines

CVT preparation

Windows admin

Linux admin

Education

Bachelor’s Degree in Computer Science or related field

Master’s degree in related field

Tools

Elastic

Splunk

ACAS

SCC

Kubernetes

PowerShell

Bash

Job description

RELOCATION ASSISTANCE: No relocation assistance available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Top Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Job Description

Northrop Grumman Space Systems—Missile Defense Integration offers an excellent opportunity for an NG-Only Sr. Principal Cyber Systems Engineer – Cybersecurity (ISSE) Engr (26-431) to join our team of skilled and diverse professionals. Based at Schriever Space Force Base, CO, this role is essential to supporting the U.S. President, the Secretary of Defense, and combatant commanders at the strategic, regional, and operational levels.

This position does not provide relocation assistance and requires on-site work with no remote options.

Position Overview

The Command and Control, Battle Management, and Communications (C2BMC) program is a key component of the Missile Defense System. It is a vital operational system that enables the U.S. president, the Secretary of Defense, and combatant commanders at strategic, regional, and operational levels to plan ballistic missile defense operations systematically, collectively monitor the battle, and dynamically control networked sensors and weapon systems to achieve global and regional mission goals.

C2BMC supports layered missile defense capabilities that enable an optimized response to threats across all ranges and flight phases. It serves as a force multiplier by networking, integrating, and synchronizing autonomous sensor and weapon systems and operations, both globally and regionally, to improve performance. C2BMC is essential for all ground and flight tests that verify and demonstrate the current and future capabilities of missile defense systems.

Essential Functions

In this position, a successful candidate will be responsible for the following:

• Install, configure, and administer cybersecurity software specializing in: Endpoint protection (e.g., antivirus, HIPS, DLP), Endpoint monitoring (e.g., security log and auditing event collection).
• Vulnerability and compliance scanning
• Write and maintain scripts and/or playbooks to automate the deployment of cybersecurity agent software to endpoints in a large, virtualized environment
• Analyze endpoint protection events to identify and filter out false positives and non–security-relevant data to enhance information system auditing capabilities and reduce alert fatigue
• Utilize cybersecurity software to perform Security Technical Implementation Guide (STIG) assessments for: Windows and Red Hat Enterprise Linux (RHEL) operating systems, Virtualization platforms, Endpoint applications (e.g., browsers, word processors)
• Write queries and build dashboards in SIEM solutions to help visualize security-relevant data for information system monitoring and analysis
• Create and manage data pipelines to transform and/or parse data being ingested into SIEM solutions to:, Add security-relevant metadata, Extract useful fields for analysis and reporting, Implement government requirements (e.g., NISPOM, NIST, DoD, ICD), validate the effectiveness of established cybersecurity controls, and make recommendations based on subject matter expertise
• Assist the Information System Security Officers (ISSOs) with Control Validation Test (CVT) preparation, including: Remediating open findings and noncompliant security controls, Addressing Plans of Action and Milestones (POA&Ms), Responding to Cyber Tasking Orders (CTOs)

Basic Qualifications

Please list your current security clearance and IAT or relevant certifications on your resume, if applicable.

• A Bachelor’s Degree in Computer Science, Cybersecurity Engineering, Mathematics, Physics, or a related field from an accredited university, along with 8 years of experience; or a Master’s degree (in a related field with 6 years of relevant work experience; or 12 years of relevant work experience may be considered as an alternative to a degree
• Applicants must have a current, active Government-Issued 8140 certification at IAT Level II / IAM Level I or higher (such as Security+ CE, CCNA-Security, CySA+, CND, etc.) at the time of application, which is required to start. The candidate is responsible for maintaining their 8140 certifications throughout the entire contract period
• Applicants must have a current, active in-scope Government-issued Top Secret security clearance at the time of application, which is required to start
• Willingness to travel 10% of the time for business needs
• Security engineering skills with a working knowledge of cybersecurity technology and DoD/Federal cybersecurity guidance (e.g., DoDI 8500.01, NIST SP 800 53)
• Experience installing, configuring, or administering a SIEM solution.
• Experience installing, configuring, or administering endpoint protection software
• Experience installing, configuring, or administering vulnerability and compliance scanning software
• Windows and Linux system administration skills

Preferred Qualifications

• Experience installing and administering Elastic or Splunk
• Experience with SPL, EQL, KQL, and/or ES/QL query languages
• Experience deploying and configuring Elastic Defend
• Experience installing and administering ACAS (e.g., Tenable Security Center and Nessus)
• Experience installing and configuring SCAP Compliance Checker (SCC)
• Experience with Scripting (e.g., PowerShell, Bash) and /or automation (e.g., Ansible)
• Experience with Kubernetes or working with containers

What We Can Offer You

Northrop Grumman provides a comprehensive benefits package and a supportive work environment that encourages your growth, benefiting both employees and the company. The benefits are flexible and customizable, enabling you to choose options that suit your individual and family needs. Your benefits will include the following:

• Health Plan
• Savings Plan
• Paid Time Off
• Education Assistance
• Training and Development
• Flexible Work Arrangements

https://benefits.northropgrumman.com/us/en2/BenefitsOverview/Pages/default.aspx

#NGSpace

#COSpace

#NGFeaturedJobs

#C2BMC

#Cybersecurity

#ISSE

Primary Level Salary Range: $142,200.00 - $213,200.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.