Cyber Systems Engineer – Level 3 (26-342)

Northrop Grumman•Colorado Springs, CO

9d•$113,900 - $170,900•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Space Systems—Missile Defense Integration offers an excellent opportunity for a Principal Cyber Systems Engineer – Cyber A&A Engineer (26-342) to join our team of skilled and diverse professionals. Based at Schriever Space Force Base, CO, this role is essential to supporting the U.S. President, the Secretary of Defense, and combatant commanders at the strategic, regional, and operational levels. This position does not provide relocation assistance and requires on-site work with no remote options. The Command and Control, Battle Management, and Communications (C2BMC) program is a key component of the Missile Defense System. It is a vital operational system that enables the U.S. president, the secretary of defense, and combatant commanders at strategic, regional, and operational levels to systematically plan ballistic missile defense operations, collectively monitor the battle, and dynamically control networked sensors and weapon systems to achieve global and regional mission goals. C2BMC supports layered missile defense capabilities that enable an optimized response to threats across all ranges and flight phases. It serves as a force multiplier by networking, integrating, and synchronizing autonomous sensor and weapon systems and operations globally and regionally to improve performance. C2BMC is essential for all ground and flight tests that verify and demonstrate the current and future capabilities of missile defense systems. The Cyber A&A Engineer will use their Assessment & Authorization (A&A) background to analyze ACAS/SCC/ConfigOS scans and controls to support continuous system authorization. The successful candidate will be expected to collaborate with C2BMC and external stakeholders to assess system vulnerabilities and account management, generate engineering responses for system POA&Ms, and conduct risk analysis for Risk Acceptance Requests (RARs).

Requirements

A Bachelor’s Degree in a related field from an accredited university, along with 5 years of experience; or a Master’s degree in a related field with 3 years of relevant work experience; or 9 years of relevant work experience may be considered as an alternative to a degree.
Current, active DoD 8140 certification at IAT Level II or higher (such as Security+ CE, CCNA-Security, CySA+, CND, etc.) at the time of application, which is required to start.
Current, active in-scope DoD-issued Top Secret security clearance at the time of application, which is required to start.
Willingness to travel 10% of the time for business needs.
Solid cybersecurity engineering skills with working knowledge of cybersecurity technologies, DoDI 8500.2, and the Risk Management Framework (RMF) 800-53.
Strong skills in preparing technical documents and communicating verbally.
In-depth comprehension of ACAS/SCC outputs.
Hands-on experience reviewing scan data, STIGs, and RMF controls.
Experience with eMASS and the accreditation of Cross-Domain Solutions (CDS).

Nice To Haves

Experience managing Cyber Tasking Orders (CTOs), IAVMs, and POA&Ms.
Experience working with 3rd party assessors and auditors.
Experience performing self-assessments and analyzing STIGs.
Experience with management and auditing of accounts.
Knowledge/Understanding of patch and configuration management for complex and disparate enterprise systems.

Responsibilities

Analyze ACAS/SCC/ConfigOS scans and controls to support continuous system authorization.
Collaborate with C2BMC and external stakeholders to assess system vulnerabilities and account management.
Generate engineering responses for system POA&Ms.
Conduct risk analysis for Risk Acceptance Requests (RARs).
Assist with the creation and maintenance of system packages in eMASS/Xacta.