Staff Cyber Systems Engineer

Northrop Grumman•Jessup, MD

9d•$194,700 - $292,100•Hybrid

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Mission Systems is a trusted provider of mission-enabling solutions for global security. Our Engineering and Sciences (E&S) organization pushes the boundaries of innovation, redefines engineering capabilities, and drives advances in various sciences. Our team is chartered by providing the skills and innovative technologies to develop, design, produce and sustain optimized product lines across the sector while providing a decisive advantage to the warfighter. Come be a part of our mission! We are looking for you to join our team as a Staff Cyber Systems Engineer based in Annapolis Junction, MD. Northrop Grumman Mission Systems Mission Defense Cyber Team has an opening for a systems engineer in the Cyber specialty discipline. As a Cybersecurity Systems Engineer (CSSE) supporting the Sentinel program. Places of performance for the Sentinel Program include Annapolis Junction MD, Roy UT, San Antonio TX, Redondo Beach CA, Huntsville AL, San Diego CA, and Colorado Springs CO.

Requirements

Bachelor’s degree with 12 years, master’s degree with 10 years, or a PhD with 8 years of experience in: Systems Engineering, Computer Engineering, Computer Science, Cybersecurity Engineering, or related technical fields or 18 years’ experience in lieu of a degree.
Direct Experience utilizing NIST 800-160 system security engineer and the system development life cycle.
Processing SOW, requirements, architecture, design, implementation, integration, verification & validation, field test, etc.
Direct experience developing RMF assessment and authorization documentation.
Current DoD 8570 certification for IASAE Level II (CISSP) and ability to obtain IASAE Level III within 6 months of Hire.
Active Secret clearance with the ability to obtain a Top Secret with SAP access.

Nice To Haves

System security architecture experience.
Experience working with DOORS and CAMEO.
Security related tool suite in DevSecOps pipeline (SonarQube, Fortify etc).
Familiarity with Systems Security Engineering (SSE) documentation (e.g. Cybersecurity Strategies, Information Support Plans, Program Protection Plans (PPPs)).
Familiarity with Anti-Tamper Plans, Counterintelligence Support Plans, Integrated Threat Assessment Reports, Operations Security Plans, Continuous Monitoring Plans, Defensive Cyberspace Operations Plans, Cybersecurity Strategies, Information Support Plans, Enterprise Architecture Views and NIST SP 800-160.
DoD 8570 certification for IASAE III (ISSEP, ISSAP).
Experience with Agile methodologies.
Active TS/SCI clearance.

Responsibilities

Implement weapon system requirements to ensure cyber survivability attributes are implemented in system designs as it assesses/evaluates the customers’/stakeholders’ cybersecurity requirements to decompose, derive, and refine the system’s cybersecurity requirements at all levels to drive the built-in cybersecurity protections to the architecture and design.
Guide/support the security layout / architecture and influences the security tools selection and development.
Evaluate/assess the proposed and realized implementations to identify security risks, attack surface, and verify the cybersecurity protections from the design are realized and integrated.
Guide/support the development of verification efforts to ensure the cybersecurity protections / capabilities are functional, effective, and complete.
Support the definition of security governance, and risk management.
Work within the Systems Engineering Group to provide technical decisions and guidance to enable timely, high quality product deliveries and flight test events that meet mission cyber requirements.
Partner and collaborate with other program systems engineers across Integrated Product Teams to accomplish program cyber requirements and meet mission objectives.
As a member of a team of specialized NGMS cyber systems engineers, support the development and enhancement of Launch and Missile Defense systems.
Participate as part of an extended team of US government, Northrop Grumman Mission Systems, Northrop Grumman Space, and supplier of cybersecurity practitioners across multiple program locations.
Ensure weapon system compliance with all contractually obligated cybersecurity standards and guidance, including but not limited to CNSSI 1253, DoD 8570, DoD 8510, and AFI 17-101.
Propose and design cyber systems architecture changes with traceability to requirements.
Provide cyber implementation guidance and oversight across technical teams.
Develop and document technical standard engineering processes and procedures as needed.
Participate in engineering reviews of technical requirements, design and implementation plans prior to development of computer systems, digital communications systems, networking devices, computer architectures.
Perform cyber-attack surface analysis of system designs with recommendations to mitigate and reduce risk.
Participate in cybersecurity assessment activities and review cybersecurity assessment methods, plans, procedures, reports and security penetration test planning and execution.
Provide input to program milestones and metrics, adhering to cybersecurity-relevant plans and schedules.
Identify problems and research technical solutions to resolve these problems.
Apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cyber Security implementation.
Solve complex problems across disciplines in an Agile, DevSecOps environment.
Support program engineering review boards.