Staff Cyber Systems Engineer

Northrop Grumman • San Diego, CA

3d • $194,700 - $292,100 • Onsite

About The Position

Northrop Grumman Aeronautics Systems is seeking a Staff Cyber Systems Engineer to join its team in San Diego, California. The position is full-time and onsite at the Rancho Bernardo, California facility; remote, hybrid, and telework arrangements are not available. Travel of up to 25% may be required. An active Top Secret clearance is required at the start, and the employee must be able to obtain and maintain SAP clearance within a timeframe determined by business needs.

The engineer will lead and support cybersecurity execution across development and sustainment, working with engineering, cybersecurity, software, integration and test, configuration management, security, customer, and program stakeholders. The role includes designing, integrating, testing, and validating system security solutions; preparing and defending accreditation packages as an ISSE or ISSM; applying DoD RMF and JSIG requirements for SAP/SCI systems; and supporting vulnerability management, security assessments, compliance documentation, and system hardening. The engineer will also provide technical leadership and mentoring, communicate cybersecurity findings and recommendations, and improve processes for cybersecurity planning, traceability, risk management, and closure.

The stated primary-level salary range is $194,700 to $292,100. Offers may depend on the position’s scope and responsibilities and on a candidate’s experience, education, skills, and market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus. Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays, and paid time off for vacation or personal business. Relocation assistance may be available.

Requirements

• Bachelor’s degree in a STEM discipline from an accredited university and at least 12 years of engineering experience, or at least 10 years of experience with a master’s degree, or at least 8 years of experience with a Ph.D.
• Active U.S. Government Top Secret clearance with a background investigation within the last 6 years or enrollment in Continuous Evaluation.
• Ability to obtain and maintain Special Access Program (SAP) clearance within a timeframe determined by business needs.
• One of the following: DoD 8140 Cyber Workforce qualification, DoD 8570 IAM Level II, CompTIA SecurityX/CASP, CISSP, or CSSLP.
• Experience preparing and defending accreditation packages as an ISSE or ISSM.
• Working knowledge of DoD RMF and JSIG for SAP/SCI systems.
• Experience validating security posture, reporting findings, and supporting risk-acceptance recommendations.
• Strong organizational and communication skills, including experience engaging stakeholders at multiple levels.

Nice To Haves

• Current SAP access.
• Advanced cybersecurity certifications, such as CISSP-ISSEP, CISSP-ISSAP, or CSSLP.
• Experience with vulnerability management, cybersecurity assessment and scanning, compliance and authorization packages, and ATO documentation.
• Experience with NIST publications, federal regulations, DoD RMF controls, and cybersecurity authorization requirements.
• Experience with IT principles and practices, including software design, test, and integration.
• Familiarity with Windows and UNIX/Linux platforms, such as Red Hat, as well as hypervisor and containerized environments.
• Experience designing or reviewing hardening using DISA STIGs/SRGs.
• Experience developing and evaluating information systems across the systems development lifecycle in a secure environment.
• Experience working in an Integrated Product Team with engineering, cybersecurity, software, integration and test, configuration management, security, customer, and program stakeholders.

Responsibilities

• Lead and support development and sustainment cybersecurity execution by identifying risks and driving technical and programmatic remediation with engineering, cybersecurity, program, and customer stakeholders.
• Design, develop, integrate, test, verify, and validate system security solutions.
• Prepare, review, and defend accreditation packages as an Information Systems Security Engineer (ISSE) or Information Systems Security Manager (ISSM).
• Apply working knowledge of DoD RMF and JSIG requirements for SAP/SCI systems.
• Validate information system security posture, interpret and report findings, and support risk-acceptance recommendations related to security-control implementation.
• Translate RMF controls into system- and design-level requirements, including decomposition, verification planning, and traceability.
• Support vulnerability management, cybersecurity scanning and assessment, compliance-package development, and requirements verification using approved tools such as ACAS and Nessus.
• Support host and network hardening using DISA STIGs and SRGs for Windows, UNIX/Linux, hypervisor, and containerized environments.
• Coordinate cybersecurity execution across the system lifecycle with systems engineering, software, integration and test, configuration management, security, and program teams.
• Prepare and present cybersecurity and systems-engineering materials for reviews, working groups, and stakeholder discussions.
• Assess cybersecurity impacts across architecture, operational constraints, program execution, and mission needs using systems thinking.
• Drive process improvements that strengthen cybersecurity planning, traceability, risk management, and closure discipline.
• Provide technical leadership, mentoring, and coordination across stakeholders and disciplines.

Benefits

• Health insurance coverage
• Life insurance
• Disability insurance
• Savings plan
• Company-paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Relocation assistance may be available
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus

What This Job Offers

• Job Type: Full-time
• Career Level: Senior