Principal / Sr. Principal Software Engineer - Software Assurance
Northrop Grumman3 days ago
El Segundo, CA, USAStaff+
Base Salary
$114k - $213k/yr
Responsibilities
- Develop and maintain the Software Assurance Evaluation Report, including initial templates and annual updates.
- Develop and update Software and Firmware Assurance Plans to meet PPP, NIST 8397, and U.S. Government guidance.
- Configure and maintain SAST, dynamic analysis, container scanning, vulnerability scanning, and related assurance tools with DevOps and system security engineering.
- Scan supplier software and firmware, analyze vulnerabilities, and coordinate remediation with suppliers.
- Review automated tool findings weekly and provide mitigation recommendations to Northrop Grumman teams and customers.
- Support code-signing tooling and secure build and deployment mechanisms.
- Sustain baseline, incremental, and option-year software and firmware assurance activities, including periodic supplier scans and reporting.
- Coordinate assurance activities across multiple teams, suppliers, and customers.
Requirements
- Principal level: bachelor’s degree in a STEM discipline and 5 years of engineering-related experience, or a master’s degree in STEM and 3 years of related experience.
- Senior Principal level: bachelor’s degree in a STEM discipline and 8 years of engineering-related experience, a master’s degree in STEM and 6 years of related experience, or a PhD in STEM and 4 years of related experience.
- Hands-on experience with application security and vulnerability management tools, including SAST, DAST, container scanning, and vulnerability scanners.
- Familiarity with secure development lifecycle practices and DevOps/CI/CD pipeline configuration.
- Ability to analyze scan results, identify vulnerabilities, and develop practical mitigation recommendations.
- Strong written and verbal communication skills, including technical plan or report writing.
- Ability to collaborate with DevOps, suppliers, customers, and security engineering teams.
- Ability to obtain and maintain a U.S. Government clearance and Special Access Program access within a reasonable timeframe.
- Preferred: degree in Computer Science, Software Engineering, Electrical Engineering, Cybersecurity, or a related technical discipline.
- Preferred: experience with NIST guidance, PPP or equivalent program protection frameworks, software and firmware assurance, code-signing implementation, secure build and deployment architectures, government or defense programs, containerized environments, infrastructure as code, cloud-native security tooling, and multi-team assurance coordination.
Benefits
- Relocation assistance may be available.
- Onsite work in El Segundo, California, with travel approximately 10% of the time.
- Flexible work arrangements and learning opportunities.
- Retirement and Savings Plan, medical, dental and vision coverage, life and disability insurance, flexible spending accounts, paid holidays, and paid time off.
- The position is contingent on program funding, with start dates determined after funding confirmation.
- The program supports baseline, incremental, and option-year phases from 2027 through 2031.
Categories
About Northrop Grumman
Northrop Grumman designs and manufactures aircraft, spacecraft, missile defense, C4ISR, and cyber systems for the U.S. government, NASA, and allied nations. The company operates primarily through long-term defense and space contracts, delivering products and services spanning autonomous systems, sensors, software, and sustainment. Founded in 1994 and headquartered in Falls Church, Virginia, it is a public company listed on the NYSE (ticker: NOC).