Sr. Principal Cyber Systems Engineer
About The Position
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Aeronautics Systems has an opening for a Sr. Principal Cyber Systems Engineer to join our team of qualified, diverse individuals in Rancho Bernardo, CA. The candidate should be a self-starter with familiarity working in an Integrated Product Team construct.
Requirements
- Bachelor of science degree in a STEM (Science, Technology, Engineering, Math) discipline and 8 years of related engineering experience; OR a Master of science degree in a STEM discipline and 6 years of engineering experience, or a PhD in a STEM discipline and 4 years of related experience.
- Must have one of the following certifications: DoD 8140 Cyber Workforce qualification, DoD 8570 IAM Level II, CompTIA SecurityX / CASP, CISSP, or CSSLP.
- Experience preparing and defending accreditation packages as an ISSE or ISSM.
- Experience working with DoD RMF and JSIG for SAP/SCI systems.
- Experience validating security posture, reporting findings, and supporting risk-acceptance recommendations.
- Experience engaging with stakeholders at multiple levels.
- Must have an active US Government Top Secret clearance (with a background investigation completed within the last 6 years or currently enrolled into Continuous Evaluation).
- Must have the ability to obtain and maintain Special Access Program (SAP) clearance within a reasonable amount of time as determined
Nice To Haves
- Current SAP access.
- Advanced cybersecurity certifications (e.g., CISSP-ISSEP, CISSP-ISSAP, CSSLP).
- Experience with vulnerability management, cybersecurity assessment and scanning, compliance/authorization packages, and ATO documentation.
- Experience with NIST publications, federal regulations, DoD RMF controls, and cybersecurity authorization requirements.
- Experience with IT principles and practices, including software design, test, and integration.
- Familiarity with Windows and UNIX/Linux platforms (e.g., Red Hat), hypervisor, and containerized environments.
- Experience designing/reviewing hardening using DISA STIGs/SRGs.
- Experience developing and evaluating information systems across the systems development lifecycle in a secure environment.
- Experience working in an Integrated Product Team with engineering, cybersecurity, software, integration/test, configuration management, security, customer, and program stakeholders.
Responsibilities
- Lead and support Development and Sustainment cybersecurity execution by identifying risks and driving technical and programmatic remediation across engineering, cybersecurity, program, and customer stakeholders.
- Design, develop, integrate, test, verify, and validate system security solutions.
- Prepare, review, and defend accreditation packages as an Information Systems Security Engineer (ISSE) or Information Systems Security Manager (ISSM).
- Apply working knowledge of DoD RMF and JSIG requirements for SAP/SCI systems.
- Validate information system security posture, interpret and report findings, and support risk-acceptance recommendations related to security controls implementation.
- Translate RMF controls into system- and design-level requirements, including decomposition, verification planning, and traceability.
- Support vulnerability management, cybersecurity scanning and assessment, compliance package development, and requirements verification using approved tools (e.g., ACAS, Nessus).
- Support host and network hardening using DISA STIGs and SRGs for Windows, UNIX/Linux, hypervisor, and containerized environments.
- Coordinate with systems engineering, software, integration/test, configuration management, security, and program teams to support cybersecurity execution across the system lifecycle.
- Prepare and present cybersecurity and systems engineering materials for reviews, working groups, and stakeholder discussions.
- Apply systems thinking to assess cybersecurity impacts across architecture, operational constraints, program execution, and mission needs.
- Drive process improvements that strengthen cybersecurity planning, traceability, risk management, and closure discipline.
- Provide technical leadership, mentoring, and coordination across multiple stakeholders and disciplines.
- Strong organizational and communication skills
Benefits
- Relocation assistance may be available
- health insurance coverage
- life and disability insurance
- savings plan
- Company paid holidays and paid time off (PTO) for vacation and/or personal business
- overtime
- shift differential
- a discretionary bonus
- Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results.
- Employees in Vice President or Director positions may be eligible for Long Term Incentives.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
