Sr Principal Cyber System Security Engineer - 18310

RELOCATION ASSISTANCE: Relocation assistance may be available

CLEARANCE REQUIRED FOR START: Yes

CLEARANCE TYPE: Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Join Northrop Grumman on our continued mission to push the boundaries of possible across land, sea, air, space, and cyberspace. Enjoy a culture where your voice is valued and start contributing to our team of passionate professionals providing real-life solutions to our world’s biggest challenges. We take pride in creating purposeful work and allowing our employees to grow and achieve their goals every day by Defining Possible. With our competitive pay and comprehensive benefits, we have the right opportunities to fit your life and launch your career today. 

Northrop Grumman Defense Systems is seeking a Sr Principal Cyber System Security Engineer. This position is located in Roy, Utah and may offer a competitive relocation package.

Primary responsibilities for this position include, but are not limited to:

• Design, implement, and maintain security architectures for aerospace and defense systems, ensuring compliance with DoD, NIST, and industry standards

• Conduct risk assessments, threat modeling, and vulnerability analyses; develop mitigation strategies and POA&Ms

• Integrate encryption, authentication, and access-control mechanisms into mission-critical hardware, software, and network platforms

• Perform security testing (penetration testing, code reviews, configuration audits) and provide remediation guidance

• Manage RMF, CMMC, and other security certifications/accreditations; author and maintain Security Plans and related documentation

• Lead anti-tamper and cyber-security engineering efforts across the full systems-engineer lifecycle (requirements, design, integration, test, V&V)

• Apply reverse-engineering techniques to validate anti-tamper and cyber-security solutions and support technical release analyses

• Coordinate technology release and exportability activities, ensuring compliance with U.S. export controls and international requirements

• Collaborate with cross-functional engineering, government, and business-development teams to embed security requirements into the SDLC and global product strategies

• Stay current on emerging threats, technologies, and regulatory changes

Basic Qualifications

• Bachelor’s degree in a Science, Technology, Engineering or Mathematics (STEM) discipline from an accredited university and 8 years of relevant experience, OR a Master’s degree and 6 years of relevant experience, OR a PhD and 4 years of relevant experience

• Must be a U.S. Citizen with an active U.S. Government Secret Clearance at the time of application, current and within scope, with an investigation date within the last 6 years

• Must have the ability to obtain and maintain Top-Secret Clearance and Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business needs

• Current DoD 8570 IAM Level II security certification (e.g., CAP, CISSP, etc.)

• Minimum two (2) years’ experience with requirements development, system integration, test, validation & verification, and with anti-tamper or cyber-security risk-management activities

• Security+ certification

Preferred Qualifications

• Active DoD Top-Secret Clearance

• Experience with requirements management tools such as DOORS, Cameo, or CPLM and collaboration platforms like JIRA, Confluence, or Fisheye

• Hands-on experience in hardware/firmware assurance, software attack-surface analysis, selective encryption, and secure key handling

• Proven track record developing and mitigating software-assurance vulnerabilities and conducting integration testing of remediation measures