Principal Cyber Systems Engineer

Principal Cyber Systems Engineer

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Mission Systems is currently seeking a Principal Cyber Systems Engineer to join our team of qualified, diverse individuals. The selected candidate will be supporting the BACN Program and will be located in San Diego, CA.

We're looking for a highly motivated, team oriented, individual that understands security and the importance to our mission. The candidate will be responsible for the secure operations infrastructure, platforms, and software, including the installation, maintenance, and improvement of environments. The candidate will act as a Cyber Subject Matter Expert (SME) and ensure compliance with the Risk Management Framework.

Responsibilities:

• Design, plan, implement, and perform assessment of security controls, policies, and processes compliance with National Security Agency (NSA) programs and DoD RMF Knowledge Service guidance.
• Participate in assessment of systems security controls to validate control implementation and identify weaknesses.
• Document the results of Certification and Accreditation activities, technical or coordination activity, prepare the system Security Plans, and update the POA&M.
• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed Implementation, automation, configuration and maintenance of security tools, centralized authentication solutions, IDS/IPS, and compliance baselines.
• Provide advanced technical analyses of cyber infrastructure challenges and problems; develop/identify technical solutions responsive to customer needs.
• Participate in team reviews of technical requirements, design and implementation plans prior to deployment.
• Recommend and implement system enhancements that will improve the performance, reliability, and security of the system including installing, upgrading, monitoring, problem resolution, and configuration.
• Serve as a Cyber SME supporting high-level technical and practical expertise.
• Assures the implementation of Cyber Security disciplines, including COMSEC, COMPUSEC, EMSEC, OPSEC, digital communications systems, network protocols and architectures, and penetration tools and techniques.
• Support the continuous assessment of IA Control compliance for systems within their responsibility.

Basic Qualifications:

• Bachelors degree in science, engineering, or related discipline with 5 years of technical experience; or 3 years of relevant experience with a Masters degree; or 1 year with a PhD
• Experience with Dell, Cisco, Palo Alto, Aruba and/or other next generation switches and firewalls.
• Experience translating technical concepts and program information to others.
• Experience in preparing and/or reviewing technical and programmatic documentation.
• Current DoD 8570 IAT Level II Certification (Security+) or higher.
• Candidate must be a US Citizen
• Clearance: A current/active DoD Secret clearance

Preferred Qualifications:

• DoD 8500-series and 8510.01 IA policy directives, approaches to cyber security, knowledge of security procedures, IATT and ATO requirements.
• Excellent communication (written and oral), negotiation and interpersonal skills necessary to support known activities/challenges working with engineering teams, management, customers, partners and government.
• System Administrator Experience with Red Hat Enterprise Linux
• Solid understanding of planning, design, and implementation necessary to support a large enterprise system.
• Working knowledge of NIST 800-37 RMF body of evidence artifacts such as SSP, SCTM, PoA&M's, SAR, RAR, RAL, ConOps, ISA, etc.
• Experience with configuring Security Incident Event Monitoring and IDS/IPS tools such as ACAS, ESS (HBSS), and Splunk on Linux RedHat and Windows environments.
• Experience with vulnerability and compliance scanners such as Tenable.SC and SCAP.
• Experience with CDS technology, security, and compliance requirements.
• Working experience deploying and configuring Linux and Windows systems in accordance with DoD STIG requirements.
• Experience scripting security processes in efforts to establish redundant, consistent and automate baselines across multiple systems.