Sentinel - Systems/Principal Systems Engineer (SCRM Vulnerability Assessment)- 17987

Northrop Grumman•Roy, UT

38d•$79,300 - $147,600•Onsite

About The Position

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Join Northrop Grumman on our continued mission to push the boundaries of possible across land, sea, air, space, and cyberspace. Enjoy a culture where your voice is valued and start contributing to our team of passionate professionals providing real-life solutions to our world’s biggest challenges. We take pride in creating purposeful work and allowing our employees to grow and achieve their goals every day by Defining Possible. With our competitive pay and comprehensive benefits, we have the right opportunities to fit your life and launch your career today. Northrop Grumman Defense Systems is seeking a Systems Engineer (SCRM Vulnerability Assessment). This position is located in Roy, Utah and supports the Sentinel program.

Requirements

Must be a US Citizen with an active U.S. Government Secret Clearance, at time of application, current and within scope, with an investigation date within the last 6 years
Must have a current or ability to obtain and maintain a Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business need
BS in one of the following or equivalent disciplines: Software Engineering, Computer Science, Digital Forensics, Computer Engineering, or Electrical Engineering with 2 years of related experience, or a Master’s degree in the above disciplines with 0 years of related experience (for Systems Engineer level)
BS in one of the following or equivalent disciplines: Software Engineering, Computer Science, Digital Forensics, Computer Engineering, or Electrical Engineering with 5 years or a Master’s degree in the above disciplines with 3 years of related experience, or 1 year with a PhD (for Principal Systems Engineer level)
Ability to obtain CompTIA Security+ certification within 6 months of starting in the position.
Familiarity of developing, documenting, and executing formal test plans and procedures, with a specific focus on vulnerability/penetration testing and counterfeit part assurance.

Nice To Haves

Top Secret Security Clearance
Any of the following certifications: OSCP, GREM, PenTest+ or comparable industry-recognized certifications
Experience utilizing penetration testing and vulnerability assessment tools (Kali Linux / Metasploit / NESSUS / ACAS / OpenVAS / Etc.)
Experience validating software configurations (STIG / OpenSCAP)
Experience with software forensics activities / processes
Experience with SCRM chain of custody processes / procedures
Experience in software or hardware reverse engineering and exploratory reconnaissance

Responsibilities

Perform vulnerability assessments against COTs hardware / software
Review, Interpret, and Communicate vulnerability assessment results
Participate in a variety of working groups, customer meetings
Contributes to the ongoing enhancement of assessment capabilities through the development and implementation of improved methodology, processes, infrastructure, tools, and deliverables