Cyber Systems Engineer - Level 3 or 4

RELOCATION ASSISTANCE: Relocation assistance may be available\n\nCLEARANCE REQUIRED FOR START: Yes\n\nCLEARANCE TYPE: SCI\n\nTRAVEL: Yes, 10% of the Time\n\n## Description\n\nAt Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people\u0027s lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation\u0027s history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work \u2014 and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they\u0027re making history.\n\nNorthrop Grumman Space Systems (NGSP) is seeking a Cyber Systems Engineer - Level 3 or 4 to join our team at our facility in Aurora, Colorado. \n\nJob responsibilities will include, but not be limited to, the following:\n\n * Support/enhance the architecture and design of baked in cybersecurity requirements and protections \n\n\n\n * Plan, implement, and perform assessment of allocated security controls, polices, and processes compliance \n\n\n\n * Translate allocated or modified security controls into system and segment level requirements \n\n\n\n * Provide cybersecurity system engineering implementation guidance and oversight to technical teams/implementers \n\n\n\n * Review and Assess stakeholder security objectives, protection needs and concerns, security requirements, and associated verification/validation methods \n\n\n\n * Provide security considerations to inform systems engineering efforts with the objective to reduce errors, flaws, and weakness that may constitute security vulnerability leading to unacceptable asset loss and consequences \n\n\n\n * Identify, quantify, and evaluate the costs/benefits of security functions and considerations to inform analysis of alternatives, engineering trade-offs, and risk treatment decisions \n\n\n\n * Author, support and maintain cybersecurity program documentation \u0026 RMF package documentation: Cybersecurity Strategies, System Security Plans, Security CONOPs, Continuous Monitoring of all Program assets, Plans, Risk Assessment Report, Security Control Traceability Matrix, etc. \n\n\n\n * Review document findings (POA\u0026M\u2019s) and ensure scheduling and completion of scanning/assessment tasks on Program assets \n\n\n\n\nThis requisition may be filled at a higher job grade based on the qualifications listed below.\n\nThis requisition may be filled as either a Level 3 or a Level 4.\n\nBasic Qualifications for a Level 3: \n\n * Bachelor\u0027s degree with 5 years of relevant experience; Master\u0027s degree with 3 years of relevant experience; PhD with 0 years of relevant experience. An additional 4 years of relevant experience may be considered in lieu of a degree.\n\n * Active Top Secret/SCI security clearance required at time of application\n\n * Direct experience developing RMF assessment and authorization documentation \n\n * Direct experience with Security Technical Implementation Guides (STIGs) \n\n * Experience with RMF (NIST 800-37) accreditation functions, including documentation, scanning, assessment, Plan of Action and Milestones (POA \u0026 M) management, and all steps of the RMF process \n\n * Direct experience assessing the Program\u0027s system security posture in compliance with customer requirements, frameworks and directives. \n\n * Experience with requirements development \u0026 derivation from allocated controls, system integration \u0026 test and validation and verification. \n\n * Experience developing Security CONOPs and SSPs \n\n * Experience with integrating Cyber Systems Engineering requirements with Program System Development Life Cycle (SDLC) initiatives \n\n * Experience of adjusting commercial security methodologies and technologies within sensitive and proprietary customer environments in accordance with NIST SP 800-53 \n\n * Ability to apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cybersecurity implementation \n\n * Ability to communicate clearly and collaborate with both internal teams, internal management and external customers \n\n * Experience of Department of War (DoW)/Intelligence Community (IC) System Security Engineering activities \n\n * Possession of Security+ Certification or Certified Information Systems Security Professional (CISSP) Certification \n\n\n\n\nBasic Qualifications for a Level 4: \n\n * Bachelor\u0027s degree with 8 years of relevant experience; Master\u0027s degree with 6 years of relevant experience; PhD with 4 years of relevant experience. An additional 4 years of relevant experience may be considered in lieu of a degree.\n\n * Active Top Secret/SCI security clearance required at time of application\n\n * Direct experience developing RMF assessment and authorization documentation \n\n * Direct experience with Security Technical Implementation Guides (STIGs) \n\n * Experience with RMF (NIST 800-37) accreditation functions, including documentation, scanning, assessment, Plan of Action and Milestones (POA \u0026 M) management, and all steps of the RMF process \n\n * Direct experience assessing the Program\u0027s system security posture in compliance with customer requirements, frameworks and directives. \n\n * Experience with requirements development \u0026 derivation from allocated controls, system integration \u0026 test and validation and verification. \n\n * Experience developing Security CONOPs and SSPs \n\n * Experience with integrating Cyber Systems Engineering requirements with Program System Development Life Cycle (SDLC) initiatives \n\n * Experience of adjusting commercial security methodologies and technologies within sensitive and proprietary customer environments in accordance with NIST SP 800-53 \n\n * Ability to apply analytical and evaluative methods and techniques to issues or studies concerning the efficiency and effectiveness of Cybersecurity implementation \n\n * Ability to communicate clearly and collaborate with both internal teams, internal management and external customers \n\n * Experience of Department of War (DoW)/Intelligence Community (IC) System Security Engineering activities \n\n * Possession of Security+ Certification or Certified Information Systems Security Professional (CISSP) Certification \n\n\n\n\nPreferred Qualifications:\n\n * Expertise with all aspects of Systems Security Engineering as defined in NIST SP 800-160 \n * System security architecture experience including cloud \n * Experience working with DOORS and CAMEO \n * Experience in security related tool suites in DevSecOps pipelines \n * Experience in configuring and implementing Rapid 7, Trellix and Splunk among other industry standard technologies\n * Subject matter expert in configuring and deploying Cross Domain Solutions (CDS) \n * Experience in Communications Security (COMSEC) \n * Experience with IPv4/IPv6 network design, architecture, and specifications including cloud\n * Experience with cloud security platforms\n * Experience working on a multidisciplinary team and developing technical proposals \n * Experience working in an Agile execution framework \n * Experience with cyber modernization efforts in terms of tools, products, platforms, processes, and automation\n * DoD 8500-series and 8510.01 IA policy directives, approaches to cyber security, knowledge of security procedures, IATT and ATO requirements. \n * Operating systems certificate (Windows/Linux)\n\n\n\n\nPrimary Level Salary Range: $125,300.00 - $187,900.00\n\nSecondary Level Salary Range: $156,400.00 - $234,600.00\n\nThe above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate\u0027s experience, education, skills and current market conditions.\n\nDepending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.\n\nThe application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.\n\nNorthrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit http://www.northropgrumman.com/EEO. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.\n