Principal / Sr. Principal Cyber Systems Engineer

Northrop Grumman•Colorado Springs, CO

2d•$113,900 - $213,200•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. The Joint Tactical Ground Station (JTAGS) program within Northrop Grumman Defense Systems was developed and built by Northrop Grumman for the U.S. Army but has since transitioned to the USSF. JTAGS receives and processes data directly down-linked from the Overhead Persistent Infrared (OPIR) constellation of satellites, including Defense Support Program (DSP) and Space Based Infrared System (SBIRS) sensors, and other infrared satellite sensors. JTAGS then disseminates near-real-time warning, alerting and cueing information on ballistic missile launches and other tactical events of interest throughout the theater using multiple communications networks. Northrop Grumman Defense Systems is seeking a multi-skilled, self-motivated, energetic individual to work as a Cyber Engineer. This position will be located in Colorado Springs, CO. As a cyber team member you should excel in interpersonal, business, and technical domains. Be able to perform comprehensive security assessments, including compliance audits and vulnerability scanning, to pinpoint security weaknesses and policy inconsistencies. You'll identify and support in the addressing of system vulnerabilities and collaborate with system administrators to implement secure configurations aligned with NIST SP800-53 security and privacy controls and customer standards. Strong collaboration and communication skills, both written and verbal, are essential for engaging with internal and external stakeholders.

Requirements

For a Principal Cyber Systems Engineer: 5 years relevant cybersecurity experience with Bachelors degree in cybersecurity or related STEM field, or 3 years relevant experience with Masters degree in cybersecurity or related STEM field
For a Sr. Principal Cyber Systems Engineer: 9 years relevant cybersecurity experience with Bachelors degree in cybersecurity or related STEM field, or 7 years relevant experience with Masters degree in cybersecurity or related STEM field
Active IAT Level II (ie. CompTIA Security+) certification
Active DoD Secret security clearance
Excellent written and verbal communication skills with subordinates, peers, and leaders
Strong organizational and time management skills
Moderate to advanced knowledge of Trellix Endpoint Security Solutions (ESS)
Intermediate proficiency in RHEL OS command line and/or Windows PowerShell
Intermediate to advanced understanding and experience with NIST SP 800-37 RMF for DoD Systems, including
Ability to navigate the IAW NIST/DoD RMF processes
Intermediate to advanced knowledge of SP 800-53 security and privacy controls, as well as selecting and applying the appropriate overlays
Proven ability to evaluate system and network configurations for compliance with Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIG), NIST 800-53 Security Controls and ISO/IEC 15408 Common Criteria to formulate and implement effective, high quality RMF accreditation packages

Nice To Haves

For a Principal Cyber Systems Engineer: intermediate to advanced knowledge of security risks & strategies, SIEM, antivirus, proxies, firewalls, and intrusion detection concepts, tools, and processes
For a Senior Principal Cyber Systems Engineer: advanced knowledge of security risks & strategies, SIEM, antivirus, proxies, firewalls, and intrusion detection concepts, tools, and processes
Experience with gaining and/or maintaining ATO accreditation and working with the ISSO/ISSM
Experience in creating, editing, and updating program CDRLs
Expert knowledge with Trellix Endpoint Security Solutions (ESS)
Experience with Hyper-V and/or VMware
Working knowledge and experience with Splunk
Experience implementing DevSecOps practices and principles for release management
Experience with satellite communications ground system(s) and/or missile warning system(s)
Experience supporting US Space Force development or sustainment program(s) as a defense contractor
Working knowledge and/or experience with JIRA for task assignment, status tracking, and execution

Responsibilities

Develop, maintain, and document technical standard operating procedures and processes as needed
Recommend, implement, and support system enhancements that improve system performance, reliability, and security, including installation, upgrades, monitoring, troubleshooting, and configuration management
Perform analysis, design, development, implementation, and security assessments to ensure compliance with NIST SP 800-53, CNSSI 1253, and DoD RMF Knowledge Service guidance
Analyze information systems and network devices while assessing the operational and security impacts of various configuration changes
Apply intermediate to advanced technical expertise and skillset to independently work cybersecurity projects and tasks IAW required DoD security and cybersecurity instructions, policies, frameworks, etc.
Troubleshoot, identify, and resolve system failures and performance issues in a timely manner
Develop and maintain cybersecurity documentation and related information artifacts
Work with cybersecurity tools such as endpoint protection platforms, SIEM tools, and vulnerability scanners to support monitoring, detection, assessment, and response activities
Participate in technical interchange meetings and collaborate with cross-functional teams
Provide support for the development and enhancement of security engineering inputs to program documentation, security authorization packages, CDRLs, and research and development reports