Principal Cybersecurity Systems Engineer (CSE)

Northrop Grumman•Oklahoma City, OK

72d•$102,600 - $153,800•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Please note that this opportunity is contingent on program funding. Start dates are determined after funding confirmation. Northrop Grumman Aeronautics Systems has an opening for a Cybersecurity Systems Engineer to join our team of qualified, diverse individuals within our Systems Engineering organization. This role is located in Oklahoma City, OK. In this role as the Cybersecurity Systems Engineer (CSE), you will assess software and hardware for vulnerabilities, develops automation for cybersecurity processes, and investigates complex technical issues. The CSE also guides/supports the security layout / architecture and influences the security tools selection and development. You'll evaluate and assess the proposed and realized implementation to identify security risks and verify the cybersecurity protections from the design are realized and integrated. Finally, you'll guide and support the development of cybersecurity related verification efforts to ensure the cybersecurity protections / capabilities are functional, effective, and complete.

Requirements

Must have a Bachelors degree in a STEM field and at least 5 years of relevant military / professional experience, OR a Master's Degree in a STEM field and at least 3 years of relevant military / professional experience, OR a PhD and at least 1 year of relevant military / professional / academic experience
Must have an active US Government Secret or higher clearance (with a background investigation completed within the last 6 years or currently enrolled into Continuous Evaluation).
Must have the ability to obtain and maintain Special Access Program (SAP) clearance within a reasonable amount of time as determined by business needs.
Must have experience in Cybersecurity vulnerability assessments and evaluation
Must have knowledge of NIST 800-53, NIST 800-171, NSS/CSA PM 9-12 and JSIG

Nice To Haves

Program cleared
CSSLP, CISSP, CEH, Security+
Foundational knowledge and experience with core systems engineering principles, including: Requirements development, allocation, and traceability, Verification and validation planning and execution, Engineering Change Processes
Experience performing cybersecurity impact assessments during design changes, capability upgrades, and/or baseline reviews
Experience performing system vulnerability scans utilizing tools such ACAS, and automated STIG tools such as Evaluate STIG or Security Compliance Checker.
Experience with networking technologies, router and switch configurations, troubleshooting and security / vulnerability assessments
Active Top Secret clearance

Responsibilities

Solve complex technical problems involving cybersecurity concepts.
Assess software static code analysis results.
Complete Cybersecurity Impact Appraisals/Evaluations on hardware/software projects
Generating and maintaining appropriate artifacts for Air Force authorization decisions.
Experience performing system vulnerability scans utilizing tools such as ACAS and STIGs.
Experience performing manual STIG / SRG verifications on disparate types of equipment including collecting and evaluating findings.
Perform system categorization based on impact analysis
Develop artifacts required for a Risk Management Framework (RMF) package: System Security Plan, Continuous Monitoring Plan, Risk Assessment Report, Security Control Traceability Matrix, Plan Of Actions & Milestones, etc.
Participate in systems engineering events across the system development lifecycle
Participate in Systems Engineering Technical Review (SETR) events across the system development lifecycle including PDR, CDR, SRR, TRR
Implement, review and assess cybersecurity system requirements verification/validation methods