Principal/Senior Principal Engineer Software - Cyber Security
Northrop Grumman1 day ago
El Segundo, CA, USA or San Diego, CA, USASenior / Staff+
Base Salary
$114k - $213k/yr
Responsibilities
- Ensure system designs and implementations comply with applicable security policies, requirements, directives, STIGs, SRGs, CIS Benchmarks, CVEs, CWEs, and OWASP guidance.
- Identify cybersecurity vulnerabilities and compliance issues and administer processes for risk mitigation and system Assessment and Authorization.
- Support security analysis, coordination, assessment, documentation, research, and process activities.
- Perform security impact and risk assessments for new system components and emerging technologies.
- Contribute to RMF implementation and recommend process tailoring using NIST, CNSSI, and related government guidance.
- Perform compliance and vulnerability testing and adjudicate deviations from approved configurations and policies.
- Design, develop, test, and evaluate information systems throughout the systems development lifecycle.
Requirements
- Level 3 requires a STEM bachelor's degree and 5 years of related engineering experience, or a STEM master's degree and 3 years, or a STEM PhD and 1 year; Level 4 requires 8, 6, or 4 years respectively.
- Hold a DoD 8140 Cyber Workforce Qualification Program qualification or DoD 8570 IAM Level II certification such as CompTIA SecurityX (CASP), CISSP, or CSSLP.
- Have cybersecurity experience covering operating system, network, software, vulnerability management, security implementation, and DoD Assessment and Authorization activities.
- Have experience with RMF, NIST, or CNSSI guidance and with development, review, approval, compliance, and assurance processes.
- Be familiar with Windows, UNIX-based platforms such as RedHat, hypervisors, containerized environments, and basic systems engineering concepts.
- Have experience with Nessus, Nexpose, SCAP, ACAS, Nmap, SAST, and DAST compliance or vulnerability reporting tools.
- Possess an active U.S. Government Top Secret SCI clearance with a recent background investigation or enrollment in Continuous Evaluation.
- Be able to obtain and maintain Special Program Access (SAP/PAR) before employment begins.
- Preferred qualifications include applicable SAP clearance, advanced certifications such as CISSP-ISSEP, CISSP-ISSAP, or advanced CSSLP, and experience with NIST publications, federal regulations, DoD policies, security hardening, authorization artifacts, and complex security assessments.
Benefits
- On-site work in San Diego or El Segundo, California, with travel required 25% of the time.
- Relocation assistance may be available.
- Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays, paid time off, 401(k) matching, a 9/80 schedule, learning opportunities, and work/life balance programs.
- The position is contingent on program funding, and start dates will be determined after funding confirmation.
Tech Stack
Windows
Categories
About Northrop Grumman
Northrop Grumman designs and manufactures aircraft, spacecraft, missile defense, C4ISR, and cyber systems for the U.S. government, NASA, and allied nations. The company operates primarily through long-term defense and space contracts, delivering products and services spanning autonomous systems, sensors, software, and sustainment. Founded in 1994 and headquartered in Falls Church, Virginia, it is a public company listed on the NYSE (ticker: NOC).