Cyber Systems Engineer (Senior Principal Level)

Northrop Grumman•Melbourne, FL

6d•$122,800 - $184,200•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Please note that this opportunity is contingent on program funding. Start dates are determined after funding confirmation. Northrop Grumman Aeronautics Systems is currently seeking a Cyber Systems Engineer (Senior Principal Level) to join our team of qualified, diverse individuals in our Systems Engineering organization. This role is located in Melbourne, FL. In this role, you will be responsible for the secure operations of cloud infrastructure, platforms, and software, including the installation, maintenance, and improvement of cloud computing environments. You will also help sustain and solidify security designs and strategies across cloud-based applications. Additionally, you will have hands-on deployment, integration, and configuration experience, and will act as a Cyber Subject Matter Expert (SME) to ensure compliance with the Risk Management Framework.

Requirements

Strong understanding of the planning, design, and implementation processes necessary to support large enterprise systems.
Working knowledge of NIST 800-37 RMF artifacts, including SSPs, Security Control Traceability Matrices (SCTMs), SARs, RARs, and other documentation.
Familiarity with vulnerability and compliance scanning tools such as Tenable.SC and SCAP.
Proficiency in scripting security processes to establish consistent, automated baselines across multiple systems for redundancy and efficiency.
Must have a Bachelors of Science degree in a STEM field and at least 8 years of relevant military / professional experience, OR a Master's Degree in a STEM field and at least 6 years of relevant military / professional experience, OR a PhD and at least 4 years of relevant military / professional experience
Must have a security certification in CAP/CGRC, CASP/SecurityX, CISM, or CISSP (or Associate) to be considered.
Must have experience in preparing, reviewing, and delivering technical and programmatic documentation.
Must have experience deploying and configuring Linux and Windows systems per DoD STIG requirements.
Must have expertise in configuring Security Incident Event Monitoring (SIEM) and IDS/IPS tools such as ACAS, HBSS, and Splunk within Linux RedHat and Windows environments.
Must have experience designing, integrating, maintaining, and retiring systems within cloud environments.
Must have an active US Government Secret or higher clearance (with a background investigation completed within the last 6 years or currently enrolled into Continuous Evaluation).
Must have the ability to obtain and maintain Special Access Program (SAP) clearance within a reasonable amount of time as determined by business needs.

Nice To Haves

Active Top Secret Clearance with a Personnel Security Investigation (PR) completed within the last 5 years.
Strong familiarity with DoD 8500-series and 8510.01 IA policy directives, including IATT and ATO requirements, and general approaches to cybersecurity.
Exceptional communication (written and oral), negotiation, and interpersonal skills to effectively support ISSE initiatives and collaborate with engineering teams, management, clients, partners, and government stakeholders.
Experience with next-generation security technologies including Dell, Cisco, Palo Alto, and other advanced networking equipment.
Knowledge of Software Development Life Cycle (SDLC) processes and tools such as DOORS.
Experience with cloud service providers like Azure and AWS, focusing on configuration, integration, and sustainability of cloud-based systems.
Knowledge of Cross-Domain Solution (CDS) technology and compliance requirements.

Responsibilities

Leverages advanced technical expertise to inform cyber engineering practices and ensuring adherence to cybersecurity disciplines such as COMSEC, COMPUSEC, EMSEC, OPSEC, and effective use of penetration tools and techniques.
Deploy, configure, and maintain security tooling configurations to ensure compliance with NIST Special Publication (SP) 800-53, CNSSI 1253, and DoD RMF Knowledge Service guidance.
Assess system security controls, validate the effective implementation of controls, identify vulnerabilities, and propose corrective measures.
Document the results of Authorization and Accreditation (A&A) activities, prepare System Security Plans (SSPs), and maintain updated Plans of Action and Milestones (POA&Ms).
Manage the implementation, automation, configuration, and maintenance of security tools, including centralized authentication solutions, IDS/IPS systems, and compliance baselines.
Provide expert technical analysis of cybersecurity infrastructure challenges, developing innovative technical solutions tailored to customer requirements.
Collaborate on technical reviews of requirements, to include generating test plans, as well as designing and implementing plans for system deployment.
Recommend and implement enhancements to security systems aimed at improving performance, reliability, and overall security posture, encompassing installation, upgrades, monitoring, troubleshooting, and configuration.