N

Northrop Grumman

Builds stealth bombers, missiles, and satellites

Principal Cyber Systems Engineer

Security Engineering & Architecture +1Confirmed live in the last 24 hours
Full-timeSan Diego, CA, USA

About the Job

Requirements

  • For Principal Cyber Systems Engineer, a Bachelor of Science degree in a STEM discipline and 5 years of related engineering experience, or a Master of Science degree in a STEM discipline and 3 years of related engineering experience, or a PhD in a STEM discipline and 1 year of related engineering experience.
  • For Senior Principal Cyber Systems Engineer, a bachelor's degree in a STEM discipline and 8 years of related engineering experience, or a master's degree in a STEM discipline and 6 years of engineering experience, or a PhD in a STEM discipline and 4 years of related experience.
  • Must hold one of the following certifications: DoD 8140 Cyber Workforce qualification, DoD 8570 IAM Level II, CompTIA SecurityX/CASP, CISSP, or CSSLP.
  • Experience preparing and defending accreditation packages as an Information Systems Security Engineer or Information Systems Security Manager.
  • Experience working with DoD Risk Management Framework and Joint Special Access Program Implementation Guide requirements for SAP/SCI systems.
  • Experience validating security posture, reporting findings, and supporting risk-acceptance recommendations.
  • Experience engaging with stakeholders at multiple levels.
  • Must have an active U.S. Government Top Secret clearance, with a background investigation completed within the last six years or current enrollment in Continuous Evaluation.
  • Must be able to obtain and maintain Special Access Program clearance within a reasonable amount of time.
  • Current SAP access is preferred.
  • Advanced cybersecurity certifications such as CISSP-ISSEP, CISSP-ISSAP, or CSSLP are preferred.
  • Experience with vulnerability management, cybersecurity assessment and scanning, compliance/authorization packages, and ATO documentation is preferred.
  • Experience with NIST publications, federal regulations, DoD RMF controls, and cybersecurity authorization requirements is preferred.
  • Experience with IT principles and practices, including software design, testing, and integration, is preferred.
  • Familiarity with Windows and UNIX/Linux platforms, including Red Hat, hypervisors, and containerized environments, is preferred.
  • Experience designing or reviewing hardening using DISA STIGs/SRGs is preferred.
  • Experience developing and evaluating information systems across the systems development lifecycle in a secure environment is preferred.
  • Experience working in an Integrated Product Team with engineering, cybersecurity, software, integration/test, configuration management, security, customer, and program stakeholders is preferred.

Responsibilities

  • Lead and support development and sustainment cybersecurity execution by identifying risks and driving technical and programmatic remediation across engineering, cybersecurity, program, and customer stakeholders.
  • Design, develop, integrate, test, verify, and validate system security solutions.
  • Prepare, review, and defend accreditation packages as an Information Systems Security Engineer or Information Systems Security Manager.
  • Apply working knowledge of DoD Risk Management Framework and Joint Special Access Program Implementation Guide requirements for SAP/SCI systems.
  • Validate information system security posture, interpret and report findings, and support risk-acceptance recommendations related to security controls implementation.
  • Translate Risk Management Framework controls into system- and design-level requirements, including decomposition, verification planning, and traceability.
  • Support vulnerability management, cybersecurity scanning and assessment, compliance package development, and requirements verification using approved tools such as ACAS and Nessus.
  • Support host and network hardening using DISA STIGs and SRGs for Windows, UNIX/Linux, hypervisor, and containerized environments.
  • Coordinate with systems engineering, software, integration/test, configuration management, security, and program teams to support cybersecurity execution across the system lifecycle.
  • Prepare and present cybersecurity and systems engineering materials for reviews, working groups, and stakeholder discussions.
  • Apply systems thinking to assess cybersecurity impacts across architecture, operational constraints, program execution, and mission needs.
  • Drive process improvements that strengthen cybersecurity planning, traceability, risk management, and closure discipline.
  • Provide technical leadership, mentoring, and coordination across multiple stakeholders and disciplines.

Desired Qualifications

  • Current SAP access.
  • Advanced cybersecurity certifications such as CISSP-ISSEP, CISSP-ISSAP, or CSSLP.
  • Experience with vulnerability management, cybersecurity assessment and scanning, compliance/authorization packages, and ATO documentation.
  • Experience with NIST publications, federal regulations, DoD RMF controls, and cybersecurity authorization requirements.
  • Experience with IT principles and practices, including software design, testing, and integration.
  • Familiarity with Windows and UNIX/Linux platforms, including Red Hat, hypervisors, and containerized environments.
  • Experience designing or reviewing hardening using DISA STIGs/SRGs.
  • Experience developing and evaluating information systems across the systems development lifecycle in a secure environment.
  • Experience working in an Integrated Product Team with engineering, cybersecurity, software, integration/test, configuration management, security, customer, and program stakeholders.

About the Company

Northrop Grumman

Builds stealth bombers, missiles, and satellites

Northrop Grumman builds military aircraft, missiles, rocket motors, satellites, and electronic systems, mostly for the American military and allied governments. It designed the B-2 stealth bomber and built NASA's James Webb Space Telescope, the largest telescope ever sent to space. The company works through four businesses: aircraft, missiles and ammunition, radar and communications systems, and space hardware such as satellites and solid rocket boosters. Most revenue comes from long-term government contracts, many of them classified. Its roots go back to Northrop Aircraft, founded in 1939, and it took its name after buying Grumman in 1994 and is based in Falls Church, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
Falls Church, VA
Founded
1939

Recently Posted Jobs

Explore more opportunities at Northrop Grumman

See more jobs