Cyber Systems Engineer - Level 3 or 4 (AHT)
About The Position
Northrop Grumman Space Systems is seeking a Cyber Systems Engineer at Level 3 or Level 4 to work at its Aurora, Colorado facility. The engineer will support the design, implementation, and protection of complex systems and cloud environments, applying systems security engineering principles across the system lifecycle and operating in highly classified environments. The role includes securing cloud infrastructure, operating cybersecurity tools and cloud security platforms, and supporting Risk Management Framework (RMF) accreditation and continuous monitoring. The engineer will collaborate with systems, software, and network engineers and program management, and provide leadership and stakeholders with technical guidance on cyber risks, mitigations, and trade-offs. The position requires an active Top Secret/SCI clearance with CI polygraph at application. Relocation assistance may be available, and travel is 10%.
Requirements
- Active Top Secret/Sensitive Compartmented Information (SCI) clearance with CI polygraph at time of application.
- Security+ or Certified Information Systems Security Professional (CISSP) certification.
- Demonstrated exposure to cloud infrastructure, network, and architecture design and implementation on AWS, Azure, or Google Cloud.
- Background in Systems Security Engineering as defined in NIST SP 800-160.
- Experience configuring and implementing Rapid7, Trellix, Splunk, and other industry-standard cybersecurity technologies.
- Experience with cloud security platforms, such as cloud-native security services, CSPM, CWPP, and cloud logging and monitoring.
- Working knowledge of DoD 8500-series and DoDI 8510.01 IA directives, cybersecurity approaches, security procedures, and IATT/ATO requirements.
- Experience with RMF (NIST 800-37) accreditation functions, including documentation, vulnerability scanning, security control assessment, POA&M management, and execution of all RMF steps.
- Experience developing RMF assessment and authorization documentation for DoD or Intelligence Community systems.
- Level 3 education and experience: bachelor’s degree plus 5 years of relevant experience, master’s degree plus 3 years, or PhD with 0 years; an additional 4 years of relevant experience may be considered in lieu of a degree.
- Level 4 education and experience: bachelor’s degree plus 8 years of relevant experience, master’s degree plus 6 years, or PhD plus 4 years; an additional 4 years of relevant experience may be considered in lieu of a degree.
Nice To Haves
- Bachelor’s degree in Computer Science, Cyber Security, Information Systems, or a related discipline; a master’s degree is preferred.
- 5+ years of experience in cyber engineering, information assurance, or a related discipline.
- Additional certifications such as CASP+, CISM, CCSP, AWS/Azure security specialty, or other advanced security/cloud certifications.
- Experience with automation and scripting, such as Python, PowerShell, Terraform, or Ansible, to support security configuration and compliance.
- Experience supporting classified programs within DoD or the Intelligence Community.
Responsibilities
- Apply Systems Security Engineering principles per NIST SP 800-160 across requirements definition, architecture, design, implementation, verification, validation, and operations.
- Design, implement, and secure cloud-based infrastructure, including servers, networks, storage, and associated services on AWS, Azure, or Google Cloud.
- Configure, integrate, and operate cybersecurity tools such as Rapid7, Trellix, and Splunk for monitoring, detection, incident response, and compliance.
- Implement and maintain cloud security platforms, including security controls, monitoring, logging, and alerting.
- Interpret and apply DoD 8500-series and DoDI 8510.01 directives, cybersecurity approaches and procedures, and IATT/ATO accreditation requirements.
- Lead and support RMF accreditation activities, including documentation, control implementation, security scanning, assessment, and continuous monitoring.
- Develop, maintain, and manage POA&Ms to track remediation activities and residual risk.
- Produce and maintain RMF assessment and authorization documentation, including System Security Plans, Security Assessment Plans/Reports, Contingency Plans, Incident Response Plans, and Continuous Monitoring Strategies.
- Collaborate with systems engineers, software engineers, network engineers, and program management to ensure security requirements are understood, implemented, and validated.
- Provide technical guidance and recommendations to leadership and stakeholders on cyber risks, mitigations, and trade-offs.
Benefits
- Health insurance coverage
- Life insurance
- Disability insurance
- Savings plan
- Company-paid holidays
- Paid time off for vacation and/or personal business
- Potential eligibility for overtime, shift differential, and discretionary bonus, depending on the position
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
