Vacancy expired!
At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
Th is experienced , Top Secret cleared position , executes System s Security Engineering (SSE) tasks in support of Space Programs, with responsibilities across S pace Segments, Communications Segments, Ground Segments , and in some cases User Segments . This position is based in our Gilbert, Arizona facility and is focused on securing space vehicle s , Ground Segments, as well as Integration & Test environments and Research & Development environments , in support of national security Space Systems .- Working as a Cyber/Systems Security Engineering Subject Matter Expert (SME) part of an integrated product team (IPT) to architect, implement, and satisfy NIST 800-171 and/or NIST 800-53 Risk Management Framework (RMF) CyberSecurity , CyberResilience , and/or CyberSurvivability requirements in support of : satellite systems, communications links, and ground comm and & control (C2) systems - including test labs and other enclaves.
- Allocating system-level r equirements ( and/or mapping to security controls), which includes working as part of the systems engineer ing team to decompose system-level security requirements across relevant S egments , Subsystems and down to specific C omponents .
- Th is allocation process include s requirements associated with secure program protection requirements across Systems Security Engineering specialty areas, or the following disciplines : Software Security Assurance, TEMPEST, COMSEC Key Management , and cryptographic component integration/development /certification . Experience is not required in each of these disciplines.
- Leading teams of Cyber/SSE personnel and individually contributing to Attack Surface Analysis (ASA) and prepar ing Systems Security Plan (SSP ) documentation for enclaves/environments that support development, integration & test of complex space systems, including Risk Assessment Reports (RAR), Security Control Traceability Matrices (SCTM), and Security Assessment Plans/ Reports.
- Leading systems secure development activities, specifically hardening systems to meet secure baseline requirements, such as DISA STIGs or CIS Benchmarks , for Commercial, Off-The-Shelf (COTS) technologies. And/or supporting, cognizant engineers in the hardening of custom-built hardware/software. Experience with complex, non-traditional systems, such as Platform IT is necessary.
- Leading and Executing assessment procedures to verify conformance with Commercial, Federal Civilian agency, Department of Defense (DoD), Intelligence Community, IA/Cyber security controls, and or survivability requirements, as required based on the specified customer/system requirements and risk threshold .
- Leading and Executing systems engineering, integration, and test activities for security-critical components, such as firewalls, anti-virus, HIDS/NIDS/HIPS, Cross Domain Solutions, cryptographic devices, and controlled interfaces.
- Leading and Executing secure system maintenance activities as a privileged user, specifically but not limited to performing, routine audit log reviews, scanning for vulnerabilities, and confirming patch es are applied to COTS software .
- Bachelors Degree in STEM Science Technology Engineering Math field or equivalent experience in lieu of degree
- 9 years IT security experience or Master's Degree in STEM with any federally regulated industry i mplementing the Risk Management Framework (RMF) NIST 800- 37 using NIST 800-53 controls in unclassified environments ( alternatively using the NIST 800-171 for CMMC compliance) s ecuring systems composed of COTS HW/SW
- DoD 8570 I A T -III Security certification
- Must have US Citizenship with active or current Top Secret clearance with suitability to obtain a dditional accesses .
- Bachelors Degree in Electrical Engineering, Computer Science, or Aerospace Engineering
- 7+ years Cyber Systems Security Engineering experience in the Defense Aerospace Industry performing:
- Security requirements analysis and decomposition ; and/or mapping requirements to security controls
- Hardening embedded systems composed of both COTS and Custom HW/SW
- Exposure to national security requirements for classified systems.
- CISSP Certification
- Active TS/SCI clearance s .
- Demonstrated knowledge of : Systems Engineering processes ; applying security to embedded systems ; systems engineering review s, milestones , and SDLC.
Vacancy expired!