Principal Software Cyber Engineer

Northrop Grumman • Colorado Springs, CO

5d • $103,600 - $155,400

About The Position

Northrop Grumman Space Systems is seeking a Principal Software Cyber Engineer to serve as the cyber and software security lead on a program developing and fielding a new ground-based radar for Space Domain Awareness missions. The role is part of the senior technical team and is responsible for defining, implementing, and sustaining the software and cybersecurity architecture for mission systems supporting operational execution, software development, and long-term radar-system sustainment. The engineer applies secure software engineering, cybersecurity principles, and systems engineering practices to design, implement, and document cyber protections for mission software and supporting services.

The position involves designing, developing, documenting, testing, debugging, and maintaining applications software and systems; collaborating with equipment designers and hardware engineers; analyzing user needs and system capabilities; resolving software and system issues; preparing operating instructions; and ensuring software standards are met. The role also requires assessing security scan results, drafting technical justifications and remediation plans, and integrating security into software development and release processes.

Requirements

• Programming experience with Java, Python, JavaScript, C, and C++.
• Experience with the Spring Framework.
• Experience debugging existing software and correcting defects.
• Familiarity with Agile development methodologies and cross-functional scrum teams.
• Ability to analyze static and dynamic scan results and develop technical justifications and remediation plans (POA&M).
• Practical experience with secure coding practices and code review to identify common vulnerabilities.
• Knowledge of CI/CD pipelines and integration of security gates into build and release processes.
• Ability to interpret security requirements and translate them into developer-facing tasks and acceptance criteria.
• Experience using version control systems and branching strategies in team environments.
• Experience with multiple Linux distributions, particularly Red Hat Enterprise Linux and Ubuntu.
• Must have an active U.S. Government Top Secret security clearance at the time of application, current and within scope.

Nice To Haves

• Experience overseeing software integrity and supply chain security, including dependency management, SBOMs, and vendor assessment.
• Familiarity with NIST SP 800-53 Risk Management Framework and DISA Application Security and Development STIG.
• Hands-on experience with one or more SAST tools, such as SonarQube or Fortify.
• Hands-on experience with one or more SCA tools, such as Sonatype Nexus.
• Certifications such as Security+, CISSP, or CSSLP.
• Familiarity with container security and orchestration hardening, including Docker and Kubernetes, and image-scanning tools.
• Practical knowledge of vulnerability lifecycle management and patching processes across environments.
• Understanding of data protection requirements and handling sensitive data, including PII, classified, and export-controlled information.
• Experience supporting or obtaining low-to-high (CDS) transfer approvals and familiarity with compliance workflows.

Responsibilities

• Lead cyber and software security for a program developing and fielding a ground-based Space Domain Awareness radar.
• Define, implement, and sustain software and cybersecurity architecture for mission systems.
• Design, develop, document, test, debug, and maintain applications software and systems.
• Collaborate with equipment designers and hardware engineers in planning, design, development, and use of electronic data processing systems.
• Analyze user needs and system capabilities to resolve issues involving program intent, output requirements, input data acquisition, programming techniques, and controls.
• Prepare operating instructions and ensure software standards are met.
• Analyze static and dynamic security scan results, distinguish actionable findings from false positives or non-applicable items, and draft technical justifications and remediation plans.
• Apply secure coding practices and conduct code reviews to identify common vulnerabilities.
• Translate security requirements into developer-facing tasks and acceptance criteria.

Benefits

• Health insurance coverage.
• Life and disability insurance.
• Savings plan.
• Company-paid holidays.
• Paid time off (PTO) for vacation and/or personal business.
• Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed