N

Northrop Grumman

Builds stealth bombers, missiles, and satellites

Principal / Senior Principal Software Engineer - Software Assurance

Security Governance, Risk & CompliancePosted on Nov 6
Full-timeEl Segundo, CA, USA

About the Job

Requirements

  • Principal-level candidates must have a Bachelor of Science degree in a STEM discipline and 5 years of engineering-related experience, or a Master's in STEM and 3 years of related engineering experience.
  • Senior Principal-level candidates must have a Bachelor of Science degree in a STEM discipline and 8 years of engineering-related experience, or a Master's in STEM and 6 years of related engineering experience, or a PhD in STEM and 4 years of related engineering experience.
  • Hands-on experience with application security and vulnerability management tools, such as static application security testing, dynamic application security testing, container scanning, and vulnerability scanners.
  • Familiarity with secure development lifecycle practices and configuration of DevOps and continuous integration/continuous delivery pipelines.
  • Ability to analyze scan results, identify vulnerabilities, and develop practical mitigation recommendations.
  • Strong written and verbal communication skills, including experience writing technical plans or reports.
  • Ability to work collaboratively with cross-functional teams, including DevOps, suppliers, customers, and security engineering.
  • Ability to obtain and maintain a U.S. Government clearance and Special Access Program access within a reasonable time as determined by business needs.

Responsibilities

  • Develop and maintain the Software Assurance Evaluation Report, including initial template creation and annual updates.
  • Develop and update the Software and Firmware Assurance Plan to meet PPP, NIST 8397, and U.S. Government guidance.
  • Collaborate with DevOps and System Security Engineering to configure and maintain static application security testing, dynamic analysis, container scanning, vulnerability scanning, and related assurance tools.
  • Perform scans of supplier software and firmware where compilable, analyze results, and work with suppliers to remediate vulnerabilities.
  • Review automated tool findings weekly and deliver mitigation recommendations to Northrop Grumman teams and the customer.
  • Support setup and deployment of code-signing tooling and related secure build and deployment mechanisms.
  • Sustain software and firmware assurance activities through baseline, incremental, and option-year phases from 2027 through 2031, including periodic supplier software and firmware scans and reporting.

Desired Qualifications

  • Direct experience with NIST guidance, such as NIST 8397, and PPP or equivalent program protection frameworks.
  • Experience in software and firmware assurance for complex, multi-supplier systems.
  • Prior involvement in code-signing implementation and secure build and deployment architectures.
  • Experience on large government or defense programs, especially in system security or software assurance integrated product teams.
  • Familiarity with containerized environments, infrastructure as code, and cloud-native security tooling.
  • Demonstrated ability to lead or coordinate assurance activities across multiple teams and suppliers.

About the Company

Northrop Grumman

Builds stealth bombers, missiles, and satellites

Northrop Grumman builds military aircraft, missiles, rocket motors, satellites, and electronic systems, mostly for the American military and allied governments. It designed the B-2 stealth bomber and built NASA's James Webb Space Telescope, the largest telescope ever sent to space. The company works through four businesses: aircraft, missiles and ammunition, radar and communications systems, and space hardware such as satellites and solid rocket boosters. Most revenue comes from long-term government contracts, many of them classified. Its roots go back to Northrop Aircraft, founded in 1939, and it took its name after buying Grumman in 1994 and is based in Falls Church, Virginia.

Company size
10,001+
Company stage
IPO
Headquarters
Falls Church, VA
Founded
1939

Recently Posted Jobs

Explore more opportunities at Northrop Grumman

See more jobs