Staff Cyber Systems Engineer
About The Position
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Our team is chartered with providing the skills, and innovative technologies to develop, design, produce, and sustain optimized product lines across the sector while providing a decisive advantage to the warfighter. Come be a part of our mission! Northrop Grumman Space Systems (NGSP) is seeking an experienced Cyber Systems Engineer supporting our Advanced Tactical Missions Business Unit (BU) to support a program out of our Linthicum, MD, Fairfax, VA or Morrisville, NC locations. A Cyber Systems Engineer ensures cyber protection needs are implemented in system designs as it assesses/evaluates the customers’/stakeholders’ cybersecurity requirements to decompose, derive, and refine the system’s cybersecurity requirements at all levels to drive the built-in cybersecurity protections to the architecture and design. The CSSE also guides/supports the security layout / architecture and influences the security tools selection and development. The CSSE evaluates/assesses the proposed and realized implementations to identify security risks, attack surface, and verify the cybersecurity protections from the design are realized and integrated. The CSSE guides/supports the development of verification efforts to ensure the cybersecurity protections / capabilities are functional, effective, and complete. A CSSE supports the definition of security governance, and risk management. As a Cyber Systems Engineer on this team, you will have the following responsibilities: Support the architecture and design of baked-in cybersecurity requirements and protections Provide cybersecurity system engineering implementation guidance and oversight to technical teams/implementers Review and Assess stakeholder security objectives, protection needs and concerns, security requirements, and associated verification/validation methods Provide security considerations to inform systems engineering efforts with the objective of reducing errors, flaws, and weaknesses that may constitute security vulnerability leading to unacceptable asset loss and consequences Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk treatment decisions Author, support and maintain cybersecurity program documentation & RMF package documentation: Cybersecurity Strategies, System Security Plans, Continuous Monitoring Plans, Risk Assessment Report, Security Control Traceability Matrix, Plan of Actions & Milestones, etc. Apply the above CSSE responsibilities to Cross Domain Solutions (CDS) and, where required, to other specific technical areas of the system
Requirements
- Bachelor's degree in a STEM discipline with 12 years of relevant experience; 10 years of relevant experience with a Master's degree; 8 years of relevant experience with a PhD
- Requires an active U.S. Government TS/SCI clearance current and within scope at time of application and willingness to sit for a polygraph
- Direct experience developing RMF assessment and authorization documentation
- Experience of RMF (NIST 800-37) accreditation functions, including documentation, scanning, assessment, Plan of Action and Milestones (POAM) management, and all steps of the RMF process
- Direct experience assessing the ProgramNulls system security posture in compliance with customer requirements and directives.
- Experience with requirements development from control listings
- Experience with integrating Cyber Systems Engineering requirements with Program System Development Life Cycle (SDLC) initiatives
- Experience of adjusting commercial security methodologies and technologies within sensitive and proprietary customer environments in accordance with NIST 800-53
- Apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cybersecurity implementation
- Direct experience of strong written and oral communication, negotiation and interpersonal skills both with internal teams, internal management and external customers
- Experience of Department of War (DoW)/Intelligence Community (IC) System Security Engineering activities
- Possession of Security+ Certification or Certified Information Systems Security Professional (CISSP) Certification
- Experience working in an Agile execution framework
Nice To Haves
- Active TS/SCI with an adjudicated polygraph
- Expertise with all aspects of Systems Security Engineering as defined in NIST SP 800-160
- System security architecture experience
- Experience in configuring and deploying Cross Domain Solutions (CDS)
- Experience working with DOORS and CAMEO
- Security related tool suites in DevSecOps pipelines
- Experience in Communications Security (COMSEC)
- Experience working on a multidisciplinary team and developing technical proposals
Responsibilities
- Support the architecture and design of baked-in cybersecurity requirements and protections
- Provide cybersecurity system engineering implementation guidance and oversight to technical teams/implementers
- Review and Assess stakeholder security objectives, protection needs and concerns, security requirements, and associated verification/validation methods
- Provide security considerations to inform systems engineering efforts with the objective of reducing errors, flaws, and weaknesses that may constitute security vulnerability leading to unacceptable asset loss and consequences
- Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk treatment decisions
- Author, support and maintain cybersecurity program documentation & RMF package documentation: Cybersecurity Strategies, System Security Plans, Continuous Monitoring Plans, Risk Assessment Report, Security Control Traceability Matrix, Plan of Actions & Milestones, etc.
- Apply the above CSSE responsibilities to Cross Domain Solutions (CDS) and, where required, to other specific technical areas of the system
Benefits
- Relocation assistance may be available
- health insurance coverage
- life and disability insurance
- savings plan
- Company paid holidays and paid time off (PTO) for vacation and/or personal business
- overtime
- shift differential
- discretionary bonus
- Annual bonuses
- Long Term Incentives (for VP or Director positions)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
