Principal Cyber Systems Engineer Lead

Northrop Grumman • Chantilly, VA

2d • $125,300 - $187,900 • Onsite

About The Position

Northrop Grumman is seeking a cybersecurity professional to join its Cybersecurity Integrated Product Team, with an enhanced focus on ground-segment cloud infrastructure. The role leads the cybersecurity posture of mission-critical information systems throughout their lifecycle, from design through decommissioning, in Agile development and operational environments. The hire will serve as the cybersecurity lead for a new mission onboarding into an existing program ecosystem and will report to the overall program cybersecurity lead.

The role works with integrated product teams to develop and decompose software security requirements, technical architectures, and system designs, while providing technical oversight. It also partners with the Platform Deployment team to implement secure infrastructure and CI/CD pipelines and to achieve accreditation and sustainment of a private cloud infrastructure. The position is based in Sterling and/or Chantilly, Virginia, requires an active Top Secret clearance at application, SCI eligibility, U.S. citizenship, and travel 10% of the time. Relocation assistance may be available.

Requirements

• Bachelor's degree in a STEM field with 5 years of relevant experience, master's degree in a STEM field with 3 years of relevant experience, or Ph.D. in a STEM field with 1 year of relevant experience.
• Active Top Secret security clearance at the time of application, SCI eligible, and U.S. citizenship.
• CISSP, CSSLP, CASP, CISM, or equivalent certification.
• Understanding of NIST 800-37, NIST 800-53, and OWASP Top 10 security controls, as well as systems engineering requirements analysis, decomposition, and analysis processes.
• Experience with cloud security and best practices.
• Demonstrated knowledge of the software development lifecycle, systems engineering review processes, and system/software accreditation milestones.
• Technical leadership and/or mentorship experience.

Nice To Haves

• Bachelor's and/or master's degree in Computer Science, Cybersecurity, or Information Systems Management.
• At least 2 years of experience in the Defense Space Industry.
• Experience with and/or certification in Earned Value Management.
• Experience in application security, software development, DevOps, and/or a related field.
• Experience with embedded C/C++, Python scripting, and Java or other object-oriented programming languages; previous development experience preferred.
• Familiarity with Zero-Trust security principles and implementation approaches.

Responsibilities

• Lead the design, development, and/or implementation of secure systems in an Agile engineering environment and continuously ensure compliance with program security requirements.
• Communicate ground security requirements to space vehicle vendors and support integration of space vehicle hardware into the overall operational ground accreditation.
• Identify, prioritize, and guide strategic oversight of software security requirements, including triage of Static Code Analysis findings and prioritization of technical debt in the software development lifecycle backlog.
• Advise software development scrum teams on secure coding, cybersecurity for containerized and orchestrated environments and CI/CD pipelines, security-focused engineering trade studies, and security best practices.
• Conduct security assessments of mission software applications, including code reviews, vulnerability assessments, and application security testing, and contribute to the system and software architecture's security posture.
• Assist in developing and implementing security tools and automated processes for static and dynamic code analysis, software dependency scanning, compliance and vulnerability scanning, auditing, and event monitoring.
• Develop Risk Management Framework artifacts, including System Security Plans, Risk Assessment Reports, Security Controls Traceability Matrices, Plans of Action and Milestones, and application security policies and practices.
• Support system accreditation to achieve Authority to Operate and conduct system security assessments through the RMF process.
• Document standard operating procedures and, as needed, perform software patch installation, flaw remediation, antivirus updates, and continuous monitoring activities.
• Ensure systems are operated, maintained, and disposed of according to the security policies and procedures in the system security authorization package.

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company-paid holidays.
• Paid time off for vacation and/or personal business.
• Potential eligibility for overtime, shift differential, and a discretionary bonus, depending on the position.
• Relocation assistance may be available.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal