Cyber Systems Engineer (Level 3 or 4)

Northrop Grumman • Dulles, VA

4d • $125,300 - $234,600 • Onsite

About The Position

Northrop Grumman is hiring a Cyber Systems Engineer at Level 3 or Level 4 to support National Security Space missions. The role applies systems security engineering expertise to complex space systems spanning ground, communications, and space segments. The successful candidate will work on-site and must have an active Top Secret clearance with SCI at application; the new hire start date is contingent on transfer of the TS clearance.

The engineer will work with integrated product teams and multiple engineering disciplines to architect, implement, and verify cybersecurity, cyber-resilience, and cyber-survivability requirements for satellite systems, communications links, and ground command-and-control systems. Work includes requirements management and decomposition, program protection, security documentation, implementation and assessment of security controls, vulnerability remediation, and customer-facing cyber test and evaluation.

The position supports security-critical system design and operations, including COTS security products, embedded processors and flight software, cross-domain solutions, cryptographic devices, controlled interfaces, and mission-unique software deployed in cloud or virtualized environments. The engineer will also support RMF activities, system hardening, continuous monitoring, and secure system operation throughout the system lifecycle.

Requirements

• For Level 3: Bachelor's degree in engineering, preferably Electrical Engineering or Software Engineering, with 5 years of experience; alternatively, 3 years of experience with a master's degree. Experience may substitute for the degree with an additional 4 years.
• For Level 4: Bachelor's degree in engineering, preferably Electrical Engineering or Software Engineering, with 8 years of experience; alternatively, 6 years of experience with a master's degree. Experience may substitute for the degree with an additional 4 years.
• At least 2 years of Cyber/SSE experience, preferably in the defense aerospace industry.
• Active Top Secret security clearance with SCI at the time of application.
• U.S. citizenship.
• Experience designing systems or networks for industry platform hardening, or hands-on experience implementing DISA STIGs and documenting deviations and mitigations.
• Experience designing systems or networks for vulnerability management, or hands-on experience scanning, remediating, mitigating, and reporting vulnerabilities using audit reduction tools, DISA ACAS, or Tenable Nessus.
• Experience implementing the RMF process from system categorization through continuous monitoring.
• Experience designing systems or networks to use, or hands-on experience operating, DISA Host Based Security System or Endpoint Security Suite solutions.
• Experience with real-time operating systems, secure coding best practices, or other mission-critical operational systems.
• Excellent technical-document preparation skills and ability to communicate with stakeholders from technical staff to senior program managers.

Nice To Haves

• Bachelor's degree in Electrical Engineering or Software Engineering.
• Master's degree in Electrical, Systems, or Aerospace Engineering.
• Current CISSP-ISSEP or CISSP-ISSAP certification.
• Seven years of IA/cybersecurity experience, including at least three years in the SAP community within the defense aerospace industry.
• Experience hardening Docker containers.

Responsibilities

• Work as part of an integrated product team to architect, implement, and satisfy RMF cybersecurity, cyber-resilience, and/or cyber-survivability requirements for satellite systems, communications links, and ground command-and-control systems.
• Manage system security engineering requirements in support of program protection, decomposing system-level security controls into technical performance requirements across segments, components, and disciplines.
• Ensure cyber requirements are included in formal requirements tracking and serve as the Cyber/SSE contributor for a segment or subsystem.
• Perform Attack Surface Analysis and prepare Systems Security Plan documentation, including Risk Assessment Reports, Security Control Traceability Matrices, Security Assessment Procedures, and Plans of Action and Milestones.
• Implement and maintain COTS security products, such as firewalls, antivirus, two-factor authentication, and SIEM tools, within terrestrial systems.
• Support design and implementation of space-vehicle hardening for embedded processors and flight software.
• Prepare and execute assessment procedures to verify conformance with applicable commercial, federal civilian, DoD, Intelligence Community, or Special Access Program security controls and survivability requirements.
• Work in an Agile engineering environment, helping triage Static Code Analysis findings and prioritize them as technical debt in the software development lifecycle backlog.
• Work in small teams on systems engineering, assembly, integration, and test activities for security-critical components such as cross-domain solutions, cryptographic devices, and controlled interfaces.
• Securely deploy Mission Unique Software in computing clouds and/or highly virtualized environments; prepare Certification To Field assessment procedures and execute test cases for customer cybersecurity representatives.
• Interface with customer representatives to perform Cyber Test & Evaluation and meet critical program milestones.
• Perform vulnerability scanning, remediation, and patch management on Windows and Red Hat operating systems and COTS/GOTS applications, including in virtualized and cloud environments.
• Document or update Standard Operating Procedures and perform software patch installation, flaw remediation, antivirus updates, and continuous monitoring as needed.
• Ensure systems are operated, maintained, and disposed of in accordance with security policies and procedures in the system security authorization package.

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company-paid holidays.
• Paid time off for vacation and/or personal business.
• Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position.
• Long-term incentives may be available to employees in Vice President or Director positions.
• Relocation assistance may be available.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level