Systems Security Engineer - Anti-Tamper & Cybersecurity (Engineer or Principal Engineer Level; Active Secret Clearance Required; Chandler, AZ)
Requisition ID: R10125968
Category: Information Technology
Location: Chandler, Arizona, United States of America
Citizenship required: United States Citizenship
Clearance Type: Secret
Telecommute: No- Teleworking not available for this position
Shift: 1st Shift (United States of America)
Travel Required: Yes, 10% of the Time
Relocation Assistance: Relocation assistance may be available
Positions Available: 1
Northrop Grumman Space Systems is seeking an experienced Systems Security Engineer/Principal Systems Security Engineer (Cyber Systems Engineer/Princ. Cyber Systems Engineer) - Anti-Tamper & Cybersecurity as part of our Glide Phase Interceptor (GPI) Systems Engineering Integration & Test (SEIT) team in our Chandler, AZ office.
Primary Responsibilities:
Develop advanced systems /security integrity and information assurance leveraging RMF and Anti-Tamper guidelines and concepts.
Serve as a Systems Security Engineer (SSE) - Anti-Tamper & Cybersecurity for a program requiring the candidate to function in a dynamic multi-disciplinary environment.
Perform SSE - Anti-Tamper & Cybersecurity activities supporting all systems engineering development life-cycle phases.
Lead and execute security efforts for secure system products, including security subsystem specifications, architecture, interface descriptions, RMF assessment and authorization, and vulnerability assessments.
Responsible for participating in the development of embedded security solutions.
Develop advanced systems security solutions and information assurance architectures that are resistant to tamper and cyber-attacks leveraging the National Institute of Standards and Technology (NIST) Cybersecurity Risk Management Framework (RMF 2.0) and Department of Defense (DoD) – Anti-Tamper guidelines and policies.
Develop top-level system requirements, flow-down requirements, and subsystem implementation concepts.
Develop SSE Statement of Work (SOW) and Basis of Estimates (BOE).
Create, update, and maintain Test and Evaluation Plans and lead all AT and Cyber Verification & Validation (V&V) test events for cybersecurity and Anti-Tamper.
Support Earned Value Management (EVM) activities required by Program Management and Contract efforts as assigned by the Cost Account Manager (CAM) or SSE Management.
Represent SSE (Anti-Tamper & Cybersecurity) in engineering review boards (ERB) and cross-discipline Integrated Product Teams (IPTs).
The candidate’s duties and work assignments are subject to change to support contract needs and demonstrated capabilities to provide professional growth opportunities.
Role Description and other Responsibilities associated with the Systems Security Engineer/Principal Systems Security Engineer - Anti-Tamper & Cybersecurity:
The candidate should possess strong technical problem-solving, written, and verbal communication skills to generate and document system-level and security subsystem-level requirements, perform security system performance assessments, and participate in system and subsystem-level verification/data review activities.
The candidate should be willing to work during odd hours (nights/weekends) occasionally and occasionally longer than usual (>40 hrs/wk) to meet deadlines.
The candidate should possess a solid resolve to drive tasks to completion autonomously.
The candidate will support program management goals associated with taskings and needs for developing product deliverables supporting the hardware and software products for successfully implementing the earned value managed contract requirements.
The candidate will utilize Program SharePoint resources to provide access to work products.
The candidate will provide weekly status on tasks assigned.
The candidate will attend and support meetings and conference events to report/ brief on the status and progress of the product as assigned by the SSE Management. Examples include Team Events, Customer Working Groups, internal Program design reviews, Sub-Contractor events, PMR, and IMS Events.
The candidate will research and provide potential risk mitigation plans supporting the Configuration Management process and change requests and provide required references, artifacts, documentation, and impact assessments related to the assigned Confidentiality, Integrity, and Availability.
The candidate will coordinate with other internal and external stakeholders to ensure test and evaluation plans support the collection of necessary results and support artifacts for compliance reporting.
The candidate will assist SSE Leads with modeling requirements.
The candidate will support System Security Requirement modifications and compliance evidence.
The candidate may support and perform eMASS data entries (uploads, record modifications, status changes, artifact mappings, etc.).
The candidate will assist with the creation/generation of artifact evidence for system package/record completeness.
The candidate will provide SCTM/SSP supporting details for control and system requirement implementation planning, artifacts (i.e., test results, process reports, compliance/work/process completion evidence), and status.
The candidate will provide inputs for POA&M update events.
The candidate will support applicable Peer Reviews on company-authored documentation.
The candidate will support SSE CDRLs as assigned.
The candidate will determine the program cyber requirements to layout appropriate cyber lab design.
The candidate’s duties and work assignments are subject to change to support contract needs and demonstrated capabilities to provide professional growth opportunities.
Other duties as assigned.
This position may be offered at the Cyber Systems Engineer Level 2 or Principal Cyber Systems Engineer Level 3
Basic Qualifications:
If offered at the Cyber Systems Engineer Level 2 requires: 2 Years with Bachelor’s in Science; 0 Years with Masters
If offered at the Principal Cyber Systems Engineer Level 3 requires: 5 Years with Bachelor’s in Science; 3 Years with Masters; 0 Years with PhD.
Candidate must have a DoD Secret level security clearance which generally requires US Citizenship as a prerequisite.
Ability to travel is required (<10%)
Currently possess or can obtain the DoD 8570-M Certifications (Security+, CISSP, etc.)
Experience ensuring system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification, and accreditation.
General knowledge of DoD based Platforms and Embedded Systems, including but not limited to RMF, Cryptography, and Systems Engineering design and implementation.
Experience writing Cybersecurity related plans, procedures, and artifacts.
Ability to work cross-functionally with program teams.
Strong verbal and written communication skills
Ability to take requirements and turn them into diagrams, architectures, or data flows.
Preferred Qualifications:
Experience ensuring system security needs are established and maintained for real-time embedded mission-critical systems design and development, including security requirements definition and allocation, security risk assessment, systems security analysis, security test, evaluation, certification, and accreditation.
Prior cybersecurity/systems security engineering experience working with DoD customers (e.g., Air Force, MDA, etc.)
Experience with NIST SP 800-53, CMMC, and other regulatory compliance, working as part of a cross-functional team to implement solutions.
Experience defining system architectures that are resistant to tamper and cyber-attacks.
Experience identifying critical program information (CPI) and writing of Anti-Tamper Plans
A strong experienced-based, and academic foundation in Systems Engineering fundamentals is desired.
Experience with external customer interfacing (meetings, presentations, negotiation) is desired.
System testing experience is desired.
Experience with Agile, Jira, and Scrum is desired.
Experience with systems engineering tools (e.g., DOORS and Cameo) is desired.
The health and safety of our employees and their families is a top priority. The company encourages employees to remain up-to-date on their COVID-19 vaccinations. U.S. Northrop Grumman employees may be required, in the future, to be vaccinated or have an approved disability/medical or religious accommodation, pursuant to future court decisions and/or government action on the currently stayed federal contractor vaccine mandate under Executive Order 14042 https://www.saferfederalworkforce.gov/contractors/.
Northrop Grumman is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO/AA and Pay Transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for most positions.
What's great about
Northrop Grumman
- Be part of a culture that thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work.
- Use your skills to build and deliver innovative tech solutions that protect the world and shape a better future.
- Enjoy benefits like work-life balance, education assistance and paid time off.
Did you know?
Northrop Grumman leads the industry team for NASA’s James Webb Space Telescope, the largest, most complex and powerful space telescope ever built. Launched in December 2021, the telescope incorporates innovative design, advanced technology, and groundbreaking engineering, and will fundamentally alter our understanding of the universe.