Hybrid Cyber Systems Engineer – Level 3 or 4

at Northrop Grumman

• Job title: Cyber Systems Engineer – Level 3 or 4
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: $119,600 - $187,900 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, SDLC
• Location requirements: Hybrid, Linthicum, United States

About the role

• Cyber Systems Engineer for Northrop Grumman supporting architecture and design of cybersecurity requirements. Handling system engineering implementation with responsibilities in assessing security controls and compliance.

Responsibilities

• Support the architecture and design of baked in cybersecurity requirements and protections
• Plan, implement, and perform assessment of allocated security controls, polices, and processes compliance
• Translate allocated security controls into system and segment level requirements
• Provide cybersecurity system engineering implementation guidance and oversight to technical teams/implementers
• Review and Assess stakeholder security objectives, protection needs and concerns, security requirements, and associated verification/validation methods
• Provide security considerations to inform systems engineering efforts with the objective to reduce errors, flaws, and weakness that may constitute security vulnerability leading to unacceptable asset loss and consequences
• Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk treatment decisions
• Author, support and maintain cybersecurity program documentation & RMF package documentation: Cybersecurity Strategies, System Security Plans, Continuous Monitoring of all Program assets, Plans, Risk Assessment Report, Security Control Traceability Matrix, etc.
• Document findings (POA&M’s) and perform scanning/assessment tasks on Program assets

Requirements

• Bachelor's degree with 5 years of relevant experience; Master's degree with 3 years of relevant experience; PhD with 0 years of relevant experience
• Active Top Secret/SCI security clearance required at time of application
• Direct experience developing RMF assessment and authorization documentation
• Direct experience with Security Technical Implementation Guides (STIGs)
• Experience with RMF (NIST 800-37) accreditation functions, including documentation, scanning, assessment, Plan of Action and Milestones (POAM) management, and all steps of the RMF process
• Direct experience assessing the Program's system security posture in compliance with customer requirements and directives.
• Experience with requirements development & derivation from allocated controls, system integration & test and validation and verification.
• Experience developing Security CONOPs and SSPs
• Experience with integrating Cyber Systems Engineering requirements with Program System Development Life Cycle (SDLC) initiatives
• Experience of adjusting commercial security methodologies and technologies within sensitive and proprietary customer environments in accordance with NIST 800-53
• Ability to apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cybersecurity implementation
• Ability to communicate clearly and collaborate with both internal teams, internal management and external customers
• Experience of Department of War (DoW)/Intelligence Community (IC) System Security Engineering activities
• Possession of Security+ Certification or Certified Information Systems Security Professional (CISSP) Certification.

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays and paid time off (PTO) for vacation and/or personal business