Sr Principal Cyber System Security Engineer - 18310

Northrop Grumman•Roy, UT

6d•$122,800 - $184,200•Onsite

About The Position

Northrop Grumman Defense Systems is seeking a Sr Principal Cyber System Security Engineer. This position is located in Roy, Utah and may offer a competitive relocation package. At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Join Northrop Grumman on our continued mission to push the boundaries of possible across land, sea, air, space, and cyberspace. Enjoy a culture where your voice is valued and start contributing to our team of passionate professionals providing real-life solutions to our world’s biggest challenges. We take pride in creating purposeful work and allowing our employees to grow and achieve their goals every day by Defining Possible. With our competitive pay and comprehensive benefits, we have the right opportunities to fit your life and launch your career today.

Requirements

Bachelor’s degree in a Science, Technology, Engineering or Mathematics (STEM) discipline from an accredited university and 8 years of relevant experience, OR a Master’s degree and 6 years of relevant experience, OR a PhD and 4 years of relevant experience
Must be a U.S. Citizen with an active U.S. Government Secret Clearance at the time of application, current and within scope, with an investigation date within the last 6 years
Must have the ability to obtain and maintain Top-Secret Clearance and Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business needs
Current DoD 8570 IAM Level II security certification (e.g., CAP, CISSP, etc.)
Minimum two (2) years’ experience with requirements development, system integration, test, validation & verification, and with anti-tamper or cyber-security risk-management activities
Security+ certification

Nice To Haves

Active DoD Top-Secret Clearance
Experience with requirements management tools such as DOORS, Cameo, or CPLM and collaboration platforms like JIRA, Confluence, or Fisheye
Hands-on experience in hardware/firmware assurance, software attack-surface analysis, selective encryption, and secure key handling
Proven track record developing and mitigating software-assurance vulnerabilities and conducting integration testing of remediation measures
Demonstrated ability to deliver technical presentations to internal and external customers and to contribute to business-development efforts

Responsibilities

Design, implement, and maintain security architectures for aerospace and defense systems, ensuring compliance with DoD, NIST, and industry standards
Conduct risk assessments, threat modeling, and vulnerability analyses; develop mitigation strategies and POA&Ms
Integrate encryption, authentication, and access-control mechanisms into mission-critical hardware, software, and network platforms
Perform security testing (penetration testing, code reviews, configuration audits) and provide remediation guidance
Manage RMF, CMMC, and other security certifications/accreditations; author and maintain Security Plans and related documentation
Lead anti-tamper and cyber-security engineering efforts across the full systems-engineer lifecycle (requirements, design, integration, test, V&V)
Apply reverse-engineering techniques to validate anti-tamper and cyber-security solutions and support technical release analyses
Coordinate technology release and exportability activities, ensuring compliance with U.S. export controls and international requirements
Collaborate with cross-functional engineering, government, and business-development teams to embed security requirements into the SDLC and global product strategies
Stay current on emerging threats, technologies, and regulatory changes