Principal Cyber Systems Security Engineer

Northrop Grumman•Baltimore, MD

8d•$119,600 - $179,400•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. We are looking for a Principal Cyber Systems Security Engineer to join our team in Baltimore, MD. This position requires 100% onsite work. As an integral part of our Systems Security Engineering Team you will be responsible for leading and providing hands-on experience in development of sensor payloads and complete mission security solutions assist our hardware and software security solutions.

Requirements

Bachelor’s degree with 5 years of experience, a Master’s degree with 3 years of experience or a PhD with 1 year of experience in Science, Technology, Engineering or Mathematics or related technical fields; an additional 4 years of experience may be considered in lieu of a degree.
U.S Citizenship is required.
A current/active DoD Secret Clearance.
Ability to obtain/maintain Special Access Program (SAP).
Experience with system engineering with DoD based Platforms, Sensors and/or Sub-systems. Including but not limited to: EO/IR, Embedded Software or Cryptography, Satellite, Architecture development, Hardware design, RF, Radar and Undersea Sensors, etc.
Experience with requirements development, derivation, system integration & test and validation and verification
Experience with Anti-tamper, Reverse Engineering and/or Risk Management Framework and Cyber Resiliency

Nice To Haves

Advanced degrees in Science, Technology, Engineering or Mathematics or related technical fields.
Active Top Secret Clearance or higher.
Experience with Hardware (Firmware) Assurance, Software Attack Surface Analysis Report, Select Software/Firmware Encryption, and Secure Key Handling
Experience with identifying and mitigating software assurance vulnerabilities and performing integration testing of mitigation/resolution
Experience with contributing to and/or making technical presentations to internal and external customers

Responsibilities

Implement and ensure compliance with government policies (e.g., JSIG, DAAPM) by reviewing process tailoring needs and approving documented procedures.
Conduct thorough analyses to validate existing security requirements and develop additional safeguards as necessary to enhance system security.
Support formal Security Test and Evaluation (ST&E) processes mandated by government authorities through comprehensive pre-test preparations, active participation in testing, result analysis, and the preparation of required reports.
Document findings from Assessment and Authorization activities, as well as technical and coordination efforts, while preparing and maintaining the system Security Plans and updating the Plan of Actions and Milestones (POA&M).
Oversee and communicate the necessary analyses and modifications for system, subsystem, or sensor exportability, ensuring compliance with international standards.
Collaborate effectively with program teams and global Business Development personnel to incorporate international requirements and features into design processes and drive product line initiatives for global market success.
Demonstrate full life cycle development experience encompassing architecture design, trade studies, Cybersecurity requirements formulation, detailed design, unit testing, system testing, and validation and verification practices.
Engage in strategic planning for Cybersecurity technology development to align with global strategic priorities and influence current and future policies.
Utilize reverse engineering techniques to architect and validate effective Cybersecurity solutions.
Actively participate in communities of practice to enhance domain knowledge and support continuous professional growth.