Principal or Sr. Principal Systems Engineer

Northrop Grumman•Huntsville, AL

8d•$108,200 - $202,600

About The Position

Northrop Grumman Mission Systems Mission Defense Cyber Team has an opening for a mid-senior level Cybersecurity Systems Engineer (CSSE) supporting the Sentinel program. A Cybersecurity Systems Engineer (CSSE) will implement weapon system requirements to ensure cyber survivability attributes are implemented in system designs as it assesses/evaluates the customers’/stakeholders’ cybersecurity requirements to decompose, derive, and refine the system’s cybersecurity requirements at all levels to drive the built-in cybersecurity protections to the architecture and design. The CSSE also guides/supports the security layout / architecture and influences the security tools selection and development. The CSSE evaluates/assesses the proposed and realized implementations to identify security risks, attack surface, and verify the cybersecurity protections from the design are realized and integrated. The CSSE guides/supports the development of verification efforts to ensure the cybersecurity protections / capabilities are functional, effective, and complete. A CSSE supports the definition of security governance, and risk management.

Requirements

Bachelor’s degree with 5 years, Master’s degree with 3 years, or a PhD with 1 years of experience in: Systems Engineering, Cybersecurity Engineering, Computer Engineering, Computer Science, or 9 years’ experience in a cyber systems engineering related fields in lieu of a degree (for Principal)
Bachelor’s degree with 8 years, Master’s degree with 6 years, or a PhD with 4 years of experience in: Systems Engineering, Cybersecurity Engineering, Computer Engineering, Computer Science, or 14 years’ experience in a cyber systems engineering related fields in lieu of a degree (for Sr. Principal)
Comprehension of systems engineering principles, theories and concepts.
Able to work semi independently with general direction from senior leadership
Direct experience utilizing NIST 800-160 system security engineer and/or the system development life cycle
Direct experience in one or more of the following Systems Engineering activities: system requirements decomposition/derivation/flow down/traceability, architecture, high-level/detail design, implementation, integration and test, and/or verification & validation.
Direct experience supporting the development of RMF assessment authorization artifacts development to satisfy NIST SP 800-37 requirements.
US Citizenship is required
Possession of an active Secret clearance.
Must be able to obtain a Top-Secret clearance.
Must be able to obtain Special Access to the program.

Nice To Haves

IASAE level III certified (ISSEP, ISSAP) in accordance with DoDI 8570/8140
Top Secret/SCI Security Clearance with additional preference for SAP briefing on the Sentinel program.
Software Assurance experience.
Expertise with Model-Based System Engineering (MBSE) and related tools such as Cameo
Expertise with Requirement Management tools such as IBM DOORs.
Knowledge of Cyber Security systems engineering practices, network technologies, DoD system development life cycles and methodologies, and insight into information technology infrastructure management/monitoring and applications
Expertise with containerized software systems in accordance with DoD DevSecOps Reference Design
Experience innovating in Cybersecurity Accreditation processes and procedures in a multi-certification (Cyber, Nuclear Surety, etc.) context as part of a Digital Engineering Environment
Experience authoring and maintaining critical program authorization documents such as Cybersecurity Strategies, System Security Plans, Continuous Monitoring Plans, Security Assessment Plans.
Experience in a Systems Engineering role with responsibilities in the planning, designing, implementation, testing, and delivery of a system with Cyber/Information Assurance requirements
Excellent communication (written and oral), negotiation, coordination, and interpersonal skills
Proven collaboration with program managers and customer representatives to meet program objectives
Experience managing and directing efforts following an Agile and DevSecOps process model
Proven success by analyzing, estimating, and implementing solutions to complex problems spanning multiple engineering disciplines
Ability to calmly negotiate challenging program requirements, strategies, and conflicting constraints among a large and diverse group of program stakeholders.

Responsibilities

Work within the Systems Engineering Group to provide technical decisions and guidance to enable timely, high quality product deliveries and flight test events that meet mission Cyber requirements
Partner and collaborate with other program systems engineers across Integrated Product Teams to accomplish program cyber requirements and meet mission objectives
As a member of a team of specialized NGMS cyber systems engineers, support the development and enhancement of Launch and Missile Defense systems
Participate as part of an extended team of US government, Northrop Grumman Mission Systems, Northrop Grumman Space, and supplier of cybersecurity practitioners across multiple program locations
Ensure weapon system compliance with all contractually obligated cybersecurity standards and guidance, including but not limited to CNSSI 1253, DoD 8570, DoD 8510, and AFI 17-101
Propose and design cyber systems architecture changes with traceability to requirements
Provide cyber implementation guidance and oversight across technical teams
Develop and document technical standard engineering processes and procedures as needed
Participate in engineering reviews of technical requirements, design and implementation plans prior to development of computer systems, digital communications systems, networking devices, computer architectures
Perform cyber-attack surface analysis of system designs with recommendations to mitigate and reduce risk
Participate in cybersecurity assessment activities and review cybersecurity assessment methods, plans, procedures, reports and security penetration test planning and execution.
Provide input to program milestones and metrics, adhering to cybersecurity-relevant plans and schedules
Identify problems and research technical solutions to resolve these problems
Apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cyber Security implementation
Solve complex problems across disciplines in an Agile, DevSecOps environment
Support program engineering review boards