Cloud Security Engineer/Principal Cloud Security Engineer (AHT)

RELOCATION ASSISTANCE: Relocation assistance may be available

CLEARANCE TYPE: Top Secret

TRAVEL: Yes, 10% of the Time

Description

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Defense Systems (NGDS) is seeking a Cloud Security Engineer to secure and enhance capabilities in support of DAF CLOUDworks at the Air Force Research Laboratory (AFRL) at Griffiss Air Force Base. DAF CLOUDworks is a rapidly growing secure cloud program that encompasses 10+ teams supporting information security, infrastructure development, and cloud migration. Along with operations and sustainment, DAF CLOUDworks focuses on securing and enhancing offerings to implement new requirements, enhance functionality, increase efficiency, and lower operating/deployment overhead. Successful candidates should have a track record as an effective communicator and problem solver who is able to develop and maintain good working relationships with internal and external stakeholders.

Basic Qualifications for a Cloud Security Engineer:

• One of the following:
  • A high school diploma or equivalent with 6 years of relevant experience
  • A bachelor’s degree with a minimum of 2 years of relevant experience
  • A master’s degree with 0 years of experience
• An active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility
• Able to obtain IAT Level II or IAT Level III certification per DoD 8140 requirements such as CompTIA SecurityX (formerly CASP+) or CompTIA Security+ within 60 days of start date
• Experience with Linux command line interface (CLI), including scripting in Bash, Python, PowerShell and automating tasks
• Technical knowledge of infrastructure components, including network, storage, Linux/Windows, and IT security concepts
• Working knowledge and/or familiarity with Cloud-based technologies (AWS Platform, Azure Platform, Google Cloud)
• Experience with NIST Risk Management Framework or other similar control framework
• Knowledge of vulnerability assessment tools including Nessus, Wireshark, Kali Linux, Nmap, Metasploit, and Lin/WinPEAS
• Experience with penetration testing, adversarial emulation, or red teaming

Basic Qualifications for a Principal Cloud Security Engineer:

• One of the following:
  • A high school diploma or equivalent with 9 years of relevant experience
  • A bachelor’s degree with a minimum of 5 years of relevant experience
  • A master’s degree with 3 years of experience
• An active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility
• Able to obtain IAT Level II or IAT Level III certification per DoD 8140 requirements such as CompTIA SecurityX (formerly CASP+) or CompTIA Security+ within 60 days of start date
• Experience with Linux command line interface (CLI), including scripting in Bash, Python, PowerShell and automating tasks
• Technical knowledge of infrastructure components, including network, storage, Linux/Windows, and IT security concepts
• Working knowledge and/or familiarity with Cloud-based technologies (AWS Platform, Azure Platform, Google Cloud)
• Experience with NIST Risk Management Framework or other similar control framework
• Knowledge of vulnerability assessment tools including Nessus, Wireshark, Kali Linux, Nmap, Metasploit, and Lin/WinPEAS
• Experience with penetration testing, adversarial emulation, or red teaming

Preferred Qualifications:

• CompTIA SecurityX or CompTIA Security+ certification or IAT Level II equivalent per DoD 8570.01
• CompTIA Pentest+
• Fundamental cloud certifications such as:
• AWS Platform (Cloud Practitioner or higher certification)
• Azure Platform (Azure Fundamentals or higher certification)
• Experience with VMware Tanzu Kubernetes Grid (TKG), Rancher, or similar DevOps architectures
• Knowledgeable of vulnerabilities found in CI/CD Pipelines
• Expertise leveraging git for code management (ArgoCD, Flux, Gitlab)