Senior Principal Cyber Systems Engineer - Cyber and Risk Management compliance

RELOCATION ASSISTANCE: Relocation assistance may be available

CLEARANCE TYPE: Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Aeronautics Systems has an opening for a Senior Principal Cyber Systems Engineer to join our team of qualified, diverse individuals within our Cyber organization. This role is located in Melbourne, FL.

We are looking for a highly motivated and team oriented individual that understands cybersecurity and the importance to our mission. In this role, you will be responsible for the secure operations of cloud infrastructure, platforms, and software, including the installation, maintenance, and improvement of cloud computing environments. You will also help develop new designs and security strategies across cloud-based applications and Infrastructure as Code (IaC). Additionally, you will act as a Cyber Subject Matter Expert (SME) and ensure compliance with the Risk Management Framework. 

 

Responsibilities: 

• Design, plan, implement, and perform assessment of security controls, polices, and processes compliance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, CNSSI 1253, and DoD RMF Knowledge Service guidance. 

• Participate in assessment of systems security controls to validate control implementation and identify weaknesses. 

• Document the results of Certification and Accreditation activities, technical or coordination activity, prepare the system Security Plans, and update the POA&M. 

• Periodically conduct a complete review of each system's audits and monitor corrective actions until all actions are closed- Implementation, automation, configuration and maintenance of security tools, centralized authentication solutions, IDS/IPS, and compliance baselines 

• Provide advanced technical analyses of cyber infrastructure challenges and problems; develop/identify technical solutions responsive to customer needs. 

• Participate in team reviews of technical requirements, design and implementation plans prior to deployment. 

• Recommend and implement system enhancements that will improve the performance, reliability, and security of the system including installing, upgrading, monitoring, problem resolution, and configuration. 

• Serve as a Cyber Security engineer (ISSE) supporting high-level technical and practical expertise.

• Assures the implementation of Cyber Security disciplines, including COMSEC, COMPUSEC, EMSEC, OPSEC, digital communications systems, network protocols and architectures, and penetration tools and techniques. 

• Support the continuous assessment of IA Control compliance for systems within their responsibility.

• Experience in preparing and/or reviewing technical and programmatic documentation.

• Experience translating technical concepts and program information to others. 

Basic Qualifications: <