Full-Time

Pr Cyber Engineer: Cryptographic Module Validation

Confirmed live in the last 24 hours

Northrop Grumman

Northrop Grumman

10,001+ employees

Aerospace and defense technology solutions provider

Cybersecurity
Aerospace
Defense

Compensation Overview

$118k - $177kAnnually

+ Bonus

Senior, Expert

No H1B Sponsorship

Dulles, VA, USA

No relocation assistance available.

US Citizenship, US Top Secret Clearance Required

Category
Cybersecurity
IT & Security
Requirements
  • BS degree in engineering, (Electrical Engineering preferred with 5 years of experience (or Masters degree with 3 years, or PhD). Experience can be considered in lieu of degree
  • US Citizen with active Top Secret security clearance and SCI/DCID 6/4 eligibility required at time of application
  • Minimum 5 years of Cyber/SSE experience, preferably within the defense aerospace industry.
  • Current DoD 8570 IASAE Level II certification (CISSP preferred).
  • Experience preparing Key and Certificate Management Plans for complex national security systems.
  • Familiarity with CNSSI 1031 and preparing System TRANSEC Plans.
  • Experience executing any crypto certification/approval/validation process for federal applications.
  • Experience executing the RMF process from system categorization through continuous monitoring.
  • Excellent technical document preparation skills with a demonstrated ability to communicate with a variety of stakeholders ranging from technical staffers up to senior program managers.
Responsibilities
  • Providing Cryptographic module certification/approval guidance to program engineering leadership, based on expertise with FIPS-140 validation labs (and governing processes) and/or NSA approval processes for national security crypto implementations.
  • Preparing Key Management specifications and plans leveraging NSA key management infrastructure (KMI) with approved approaches towards implementing over the air rekeying or over the network rekeying (OTAR/OTNK).
  • Preparing System TRANSEC Plan (STP) in accordance with CNNSP-31 and CNSSI-1031.
  • Working as part of an integrated product team (IPT) to architect, implement, and satisfy Risk Management Framework (RMF) CyberSecurity, CyberResilience, and/or CyberSurvivability requirements of satellite communications links and related ground stations (aka teleports). The principal engineer engages with multiple engineering disciplines and contributes to the secure design of complex systems.
  • System Security Engineering requirements management in support of program protection (PP) requirements, working with systems engineers to decompose system-level security controls into technical performance requirements across the segments and down to specific components, across disciplines Anti-Tamper, TEMPEST, Cybersecurity (RMF), and cryptographic component integration/development. The principal engineer ensures that Cyber requirements are included in the formal requirements tracking process and is Cyber/SSE contributor for a segment or subsystem.
  • Robust understanding of RED/BLACK segregation and TEMPEST requirements for complex systems.
  • Architecting Cross Domain Solutions for systems requiring multiple security classification levels.
  • Performing Attack Surface Analysis (ASA) and preparing Systems Security Plan (SSP) documentation for complex space systems, including Risk Assessment Reports (RAR), Security Control Traceability Matrices (SCTM), Security Assessment Procedures, and POA&Ms.
  • For space segments, the Principal Cyber SSE supports design and implementation of space vehicle hardening, for embedded processors and flight software. Experience with real-time operating systems, secure coding best practices, or other mission critical operational systems is required.
  • Preparing and Executing assessment procedures to verify conformance with Commercial, Federal Civilian agency, Department of Defense (DoD), Intelligence Community, and/or Special Access Program, Cyber/SSE security controls, and or survivability requirements, as required based on the specified customer/system requirements.

Northrop Grumman specializes in aerospace and defense technology, providing solutions for government clients like the U.S. Department of Defense. The company focuses on areas such as autonomous systems, cybersecurity, and C4ISR, developing products through research, manufacturing, and technology integration. Its business model relies on securing long-term contracts through competitive bidding, which helps maintain a steady revenue stream. Northrop Grumman aims to stay competitive by continuously investing in innovation and technological advancements.

Company Stage

IPO

Total Funding

$192.2M

Headquarters

Falls Church, Virginia

Founded

1939

Simplify Jobs

Simplify's Take

What believers are saying

  • Increased demand for autonomous systems boosts Northrop Grumman's innovation and investment.
  • U.S. space exploration focus offers growth opportunities for Northrop Grumman's space systems.
  • Digital transformation in defense enhances Northrop Grumman's technology services potential.

What critics are saying

  • China's control over antimony poses a supply chain risk for Northrop Grumman.
  • Surging antimony prices could impact Northrop Grumman's production costs.
  • Boeing's recruitment of a former executive may increase competition.

What makes Northrop Grumman unique

  • Northrop Grumman excels in autonomous systems, cyber, and C4ISR technologies.
  • The company has a strong track record with long-term government contracts.
  • Northrop Grumman's diversified revenue from Aerospace, Mission Systems, and Technology Services segments.

Help us improve and share your feedback! Did you find this helpful?