Principal Systems Security Engineer
Job Description
Northrop Grumman is hiring a Principal Systems Security Engineer to support anti-tamper and/or cybersecurity development for sensor payloads and secure mission security solutions at the San Antonio, TX site.
Responsibilities
- Lead full life-cycle systems security engineering for Anti-Tamper and/or Cybersecurity, including architecture design, trade studies, requirements formulation, detailed design, unit testing, system testing, and validation and verification practices
- Support development and implementation of hardware and software Anti-Tamper and/or CyberSecurity techniques and countermeasures to protect assets and improve operational integrity and reliability
- Support compliance with US Government policies (including examples such as JSIG, DAAPM, NIST 800-53, CNSSI 1253, DODI 5200.39) by:
- Supporting secure system architecting
- Reviewing processes and tailoring controls
- Approving documented procedures and artifacts
- Overseeing security testing and analysis
- Perform analyses to validate security requirements and define additional safeguards as needed
- Collaborate with US Government and program teams to negotiate and develop Anti-Tamper/CyberSecurity solutions for international export markets, ensuring security compliance with Tri-Service Committee and Red Team requirements for US-deployed and exported military systems
- Use reverse engineering techniques to architect and validate effective Anti-Tamper/CyberSecurity solutions
- Conduct Technical Release Analyses in accordance with US Government security governance, service policies, and licensing precedents, including:
- Preparing, assessing, and certifying Controlled Unclassified Information (CUI) and higher information determinations for licensing
- Supporting Critical Program Information determinations for licensing
- Coordinate Technology Release efforts with program personnel by working with stakeholders and SMEs, including development and delivery of training on Technology Release processes
- Manage and communicate analyses and modifications related to system, subsystem, or sensor exportability to ensure compliance with international standards
- Apply intermediate understanding of cryptographic security protocols to protect sensitive information
- Support Security Test and Evaluation (ST&E) through pre-test preparation, active participation in testing, result analysis, and report preparation
- Document findings from Assessment and Authorization activities, and maintain Security Plans and updates to POA&M (Plan of Actions and Milestones)
- Support strategic planning for Anti-Tamper and CyberSecurity technology development aligned with global strategic priorities and policy direction
- Partner with program teams and global Business Development stakeholders to incorporate international requirements and features, supporting product line initiatives for global market success
- Participate in communities of practice to build domain knowledge and support continuous professional development
Requirements
- Education and experience:
- Bachelor’s degree in a Science, Engineering, or Mathematics field with 5 years of related experience
- OR Master’s degree in a STEM field with 3 years of related experience
- OR PhD in a STEM field with 1 year of related experience
- Two (2) years of Systems Engineering experience with DoD platforms/systems, sensors, and/or sub-systems (examples include EO/IR, embedded software or cryptography, satellite, architecture development, hardware design, RF, radar, and undersea sensors)
- Two (2) years experience (individually or collectively) in one or more areas:
- Anti-Tamper or Cybersecurity
- Cybersecurity Risk Management Framework
- Cybersecurity Resiliency
- Reverse Engineering
- Security requirements development
- System Security Integration & Testing
- Security Validation and verification
- US Citizenship with ability to obtain and maintain a minimum Secret Clearance (additional customer-specified clearance may apply)
Technologies
- NIST 800-53
- JSIG
- DAAPM
- CNSSI 1253
- DODI 5200.39
- Tri-Service Committee
- ST&E
- POA&M
- EO/IR
- RF
- Radar
- Cryptography
Benefits
- Health insurance coverage
- Life and disability insurance
- Savings plan
- Company paid holidays
- Paid time off (PTO) for vacation and/or personal business
- Overtime, shift differential, and a discretionary bonus (depending on the position)
- Annual bonuses
- Long Term Incentives (employees in Vice President or Director positions)
Relocation Assistance
- Relocation assistance may be available
Travel
- Yes, 10% of the Time
Clearance
- Clearance required for start: No
- Clearance type: Secret
Preferred Qualifications
- Advanced degrees in Science, Technology, Engineering or Mathematics or related technical fields
- Active Secret or Top-Secret clearance
- Experience with Systems Security Engineering development of DoD weapon systems
- Experience with Hardware (Firmware) Assurance, Attack Surface Analysis and Reporting, Software/Firmware Encryption, and Secure Key Handling
- Experience with identifying and mitigating software vulnerabilities and performing integration testing of mitigations
- Experience contributing to and/or making technical presentations to internal and external customers
Salary and Application Timing
- Primary level salary range: $103,600.00 - $155,400.00 (USD per year)
- Application period: estimated 20 days from the job posting date (may be shortened or extended depending on business needs and candidate availability)