Help us maintain the quality of jobs posted on PowerToFly. Let us know if this job is closed.
Job Details
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. This Staff Cyber Systems Engineer position is for a Cyber professional on a Communications Segment -focused program acting as a Subject Matter Expert and key technical contributor. The SME's goal is architecting, designing, and building security features into communication segment subsystems, components, and networks. Prior knowledge and experience applying Cyber / Systems Security Engineering (Cyber/SSE) principles to complex systems in the early system development phase of the lifecycle is essential. The Cyber SME is responsible for internal/external stakeholder coordination of Cyber/SSE requirements, development status, milestones, and deliverables. Exceptional customer intimacy skills are essential. Additionally, the Cyber SME coordinates multi-disciplinary activities across multiple overlapping threads and engineering specialties -- Cross Domain Solution architectures, Crypto Key Generation, Distribution & Management schemas, and Risk Management Framework (RMF). As the Cyber SME, strong technical qualifications are required with demonstrated leadership on complex development efforts. Additional Responsibilities for a Staff Program Cyber/SSE SME:
- Working as a technical lead in a multi-threaded engineering environment, where the Cyber SME may supervise and prioritize security requirements; identify driving requirements from Cyber Survivability/Resilience, Risk Management Framework (RMF), and/or System/Technical Requirements Document (SRD or TRD); and allocate Cyber/SSE requirements to segment/subsystem/component specifications.
- Leading Cyber/SSE element technical presentations during engineering milestone reviews - SRR, PDR, CDR, and PSR in accordance with our internal Cyber Systems Engineering standard practices.
- Ensuring the multi-disciplinary team are remediating security tool findings by working with software developers, systems engineers, and other engineering disciplines to resolve technical and programmatic cybersecurity concerns. A demonstrated ability to work collaboratively and productively with others is an essential skill, as well as distilling and communicating technical cyber backlog (POA&Ms) to internal & external leaders.
- Understanding of Space/Ground interface control documents and security-relevant connectivity considerations at physical, electrical, and logical layers.
- Mastery of RED/BLACK boundary definition, TEMPEST considerations, Crypto units, Cross Domain Solutions, and Controlled Interfaces within space systems.
- Leading Cyber/SSE efforts in the development of program CDRLs:
- RMF SSP including SCTM, RAR, POAMs and relevant artifacts (Incident Response Plan, Contingency Plan, ConMon Plan, as appropriate).
- Key & Certificate Management Plan (KCMP)
- Program Protection Implementation Plan (PPIP) and Cybersecurity Strategy.
- Ensuring systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the system security authorization package (SSP, SCTM, ConMon Plan, RAR).
- Championing automation efforts across all DevSecOps disciplines to routinely accomplish SCAP SCANs, developing and running NIST 800-53a Verification Procedures and automating manual STIG check lists.
- Bachelor's degree in STEM field with 14 years IT security (Cybersecurity) experience in support of USG; or a Master's degree with 12 years; or a PhD with 9 years
- 9 years technical leadership experience
- Must have U.S. Citizenship, with active TS/SCI clearance.
- CISSP Certification
- Familiarity with Systems Engineering processes and milestones; understanding of the requirements analysis, decomposition, and allocation process.
- Must Have a Commitment to working on-site.
- 15 years Cyber/SSE experience in the Defense Aerospace Industry
- 5 years' experience working within restricted program areas.
- Formal EVMS project management training with CAM experience
- Demonstrated engineering leadership experience participating in Systems Engineering milestone reviews, as the cybersecurity focal.
About the Company
Northrop Grumman
Falls Church, VA, United States
We are a close-knit community of big thinkers collaborating to keep the world safe. Our passion, creativity and expertise bring next-level... Read more