Principal Cyber Systems Engineer

Core Responsibilities:

• Performs as a subject matter expert (SME) in highly specialized, leading edge information technologies and methodologies
• Provides highly technical and specialized guidance concerning automated solutions to complex information processing problems
• Performs assessment of systems and networks within a bare-metal and virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy
• Development of high-level and detailed system design artifacts in accordance with DoD architecture framework
• Performs compliance audits using STIG Viewer, SCAP, etc and active evaluations such as vulnerability assessments utilizing Administer Assured Compliance Assessment Solution (ACAS) to identify missing patches
• Performs Security Technical Implementation Guide (STIG) assessments and hardening for both Windows, Red Hat Enterprise Linux (RHEL) systems, NetApp storage and Cisco networking equipment
• Establishes control processes to ensure mitigation of risks and support accreditation of systems
• Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits
• Develops and executes test procedures to verify security controls
• Performs analyses to validate established security requirements
• System analysis activities to include requirements analysis, gap analysis, analysis of alternatives
• Develops test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks
• Updates Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated
• Works with local system and network administrators, developers, test and integration, and other program personnel to coordinate application of system configurations while ensuring no laps of operational functionality
• Performs elaborate analyses and studies
• Prepares reports and gives presentations
• Occasional travel may be required

Basic Qualifications for the Principal Cyber Systems Engineer position:

• Active DoD TS clearance with the ability to obtain an SCI clearance; SCI clearance needed prior to start date
• Bachelor’s degree with 5 years of relevant experience, or a Master's degree with 3 years of relevant experience; an additional 4 years in lieu of bachelors degree
• Experience performing elaborate analyses and studies; preparing reports and giving presentations
• Experience with Linux & Windows system administration
• Experience with the Risk Management Framework
• Knowledge of Modern DevSecOps technologies
• Knowledge of Modern Network technologies
• Must have Security+, CASP, or CISSP certification

Basic Qualifications for the Sr Principal Cyber Systems Engineer position:

• Active DoD TS clearance with the ability to obtain an SCI clearance; SCI clearance needed prior to start date
• Bachelor’s degree with 9 years of relevant experience, or a Master's degree with 7 years of relevant experience; an additional 4 years in lieu of bachelors degree
• Experience performing elaborate analyses and studies; preparing reports and giving presentations
• Experience with Linux & Windows system administration
• Experience with the Risk Management Framework
• Knowledge of Modern DevSecOps technologies
• Knowledge of Modern Network technologies
• Must have Security+, CASP, or CISSP certification

Preferred Qualifications:

• Experience leading medium to large complex projects
• Experience managing the fact-finding, analysis, and development of hypothesis/conclusions, production of final reports and delivery of presentations
• Demonstrated responsibility for ensuring that the project delivers to ISSM expectations on time and to budget; manage the project work as defined by Projects
• Demonstrated performance in highly specialized, leading edge information technologies and methodologies.
• Experience providing highly technical and specialized guidance concerning automated solutions to complex information processing and IT problems
• Experience with Cisco, scripting, and VMware is a plus.
• Advanced product certifications e.g., CCNA, CCNP, CCIE.
• Knowledge and/or experience in: AD/DNS, Patch Management, PKI, HBSS, ACAS, VMware products, Splunk
• Familiarity in the Risk Management Framework (RMF) Cybersecurity Lifecycle to include identifying controls overlays, generating testable requirements, identifying resilient architecture design, configuring, running, and scripting audit tools, providing analysis of vulnerability analyses, conducting verification testing for compliance assessment
• Active SCI clearance

The health and safety of our employees and their families is a top priority. The company encourages employees to remain up-to-date on their COVID-19 vaccinations. U.S. Northrop Grumman employees may be required, in the future, to be vaccinated or have an approved disability/medical or religious accommodation, pursuant to future court decisions and/or government action on the currently stayed federal contractor vaccine mandate under Executive Order 14042 https://www.saferfederalworkforce.gov/contractors/.

Northrop Grumman is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO/AA and Pay Transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for most positions.