Principal Systems Security Engineer

Northrop Grumman • San Antonio, TX

1d • $103,600 - $155,400 • Onsite

About The Position

Northrop Grumman is seeking a Principal Systems Security Engineer for its Systems Security Engineering team in San Antonio, Texas. The role provides hands-on systems security engineering for sensor payloads and secure mission solutions, supporting hardware and software security capabilities for military systems. The position is full-time and on-site, and may be contingent upon funding or contract award and the ability to obtain and maintain the required U.S. Government security clearance.

Requirements

• Bachelor’s degree in a science, engineering, or mathematics field and 5 years of related experience; or a STEM master’s degree and 3 years of related experience; or a STEM Ph.D. and 1 year of related experience.
• At least 2 years of Systems Engineering experience with DoD platforms, systems, sensors, or subsystems.
• At least 2 years of experience, individually or collectively, in one or more of the following: Anti-Tamper or cybersecurity; cybersecurity Risk Management Framework; cybersecurity resiliency; reverse engineering; security requirements development; system security integration and testing; or security validation and verification.
• U.S. citizenship and ability to obtain and maintain at least a Secret clearance, as well as any additional customer-specified clearance.

Nice To Haves

• Advanced degree in science, technology, engineering, mathematics, or a related technical field.
• Active Secret or Top Secret clearance.
• Experience with Systems Security Engineering development for DoD weapon systems.
• Experience with hardware (firmware) assurance, attack surface analysis and reporting, software/firmware encryption, and secure key handling.
• Experience identifying and mitigating software vulnerabilities and integration testing of mitigations.
• Experience contributing to and/or delivering technical presentations to internal and external customers.

Responsibilities

• Apply full life-cycle systems engineering practices to Anti-Tamper and/or cybersecurity, including architecture design, trade studies, requirements formulation, detailed design, unit and system testing, and validation and verification.
• Develop and implement hardware and software Anti-Tamper and/or cybersecurity techniques and countermeasures to protect assets and improve operational integrity and reliability.
• Support compliance with U.S. Government security policies by helping architect secure systems, reviewing processes, tailoring controls, approving documented procedures and artifacts, and overseeing security testing and analysis.
• Analyze existing security requirements and develop additional safeguards where needed.
• Collaborate with U.S. Government and program teams to negotiate and develop Anti-Tamper and cybersecurity solutions for international export markets, meeting applicable Tri-Service Committee and Red Team requirements.
• Use reverse engineering techniques to architect and validate Anti-Tamper and cybersecurity solutions.
• Conduct Technical Release Analyses under U.S. Government security governance, service policies, and licensing precedents; prepare, assess, and certify information and Critical Program Information determinations for licensing.
• Coordinate Technology Release efforts with program personnel and relevant stakeholders and subject-matter experts, including developing and delivering training on Technology Release processes.
• Manage and communicate analyses and modifications needed for system, subsystem, or sensor exportability, ensuring compliance with international standards.
• Apply an intermediate understanding of cryptographic security protocols to protect sensitive information.
• Support formal Security Test and Evaluation processes, including preparation, participation, results analysis, and preparation of required reports.
• Document Assessment and Authorization findings and technical and coordination efforts; prepare and maintain system Security Plans and update Plans of Actions and Milestones.
• Support strategic planning for Anti-Tamper and cybersecurity technology development aligned with global strategic priorities and relevant policy development.
• Work with program teams and global Business Development stakeholders to incorporate international requirements and features into designs and support product-line initiatives for global markets.
• Participate in communities of practice to build domain knowledge and support professional development.

Benefits

• Health insurance coverage
• Life insurance
• Disability insurance
• Savings plan
• Company-paid holidays
• Paid time off for vacation and/or personal business
• Potential eligibility for overtime, shift differential, and discretionary bonus, depending on the position

What This Job Offers

• Job Type: Full-time
• Career Level: Senior