Sentinel - Lead Systems Security Engineer – COTS Vulnerability Assessment

Northrop Grumman•Roy, UT

66d•$152,900 - $229,300•Onsite

About The Position

Northrop Grumman Defense Systems is hiring a Lead Systems Security Engineer – COTS Vulnerability Assessment. This position is in Roy, Utah and will support the Sentinel program. Northrop Grumman supports the Air Force’s sustainment, development, production and deployment of hardware and system modifications for Intercontinental Ballistic Missile (ICBM) Ground and Airborne Launch Control Systems, Launch Facilities and associated infrastructure. The Systems Security Engineering (SSE) team is seeking a Lead Systems Security Engineer – COTS Vulnerability Assessment (Staff Systems Engineer – level 5). In this role, you will be responsible for leading a team and mentoring junior engineers towards researching, testing, and documenting the cybersecurity posture of commercial off-the-shelf hardware and software products.

Requirements

Bachelor of Science in STEM with 12 years of experience; 10 years of experience with a master’s degree; or 8 years with PhD
Must be a U.S Citizen with an active DoD Top Secret clearance (with a background investigation within the past 6 years or enrolled into Continuous Evaluation
Ability to obtain and maintain Special Program Access (SAP/PAR).
8-12 years of progressive experience in systems security engineering, cyber risk management, and/or vulnerability assessment of COTS hardware and software
4 years of experience with/demonstrated ability to develop, document, and execute formal test plans focused on penetration testing, supply chain risk management, and counterfeit part assurance
4 years of experience with/knowledge of DoD cybersecurity policies, NIST RMF, and CMMC

Nice To Haves

Top-Secret clearance with SAP eligibility (SCI a plus)
OSCP, GREM, PenTest+, CSSLP certifications
Experience developing on or evaluating Real Time Operating Systems (VxWorks, GreenHills Integrity, LynxOS, FreeRTOS, etc.)
Experience validating software configurations (STIG, OpenSCAP, SCAP SC) and implementing policy as code pipelines (GitLab CI, Jenkins, Azure DevOps)
Experience with SCRM chain of custody processes and provenance assessments for COTS components
Familiarity with MBSE concepts and tools (SysML, Cameo, Enterprise Architect, IBM?DOORS) to trace security requirements to verification artifacts

Responsibilities

Perform vulnerability assessments against COTs hardware / software
Develop, lead, and provide oversight for lab procedures
Review, Interpret, and Communicate vulnerability assessment results
Participate in a variety of working groups, customer meetings
Contributes to the ongoing enhancement of assessment capabilities through the development and implementation of improved methodology, processes, infrastructure, tools, and deliverables