Northrop Grumman’s Systems Engineering organization is hiring a Systems Security Engineer (Principal or Senior Principal) to support system security engineering activities in Oklahoma City, OK on an onsite basis. In this role, you will help deliver Program Protection capabilities across the acquisition and development lifecycle, with a focus on supply chain risk management and counterfeit parts prevention, aligned to U.S. Government standards and processes.

You will operate within a fast-changing environment with minimal direction, contributing technical leadership, reviewing security outputs, and interfacing across cyber functional areas and program stakeholders to support mission assurance.

Key Responsibilities

Apply program protection expertise, manage supply chain risk, and perform supply chain vulnerability and risk assessments
Develop and maintain Program Protection Implementation Plan(s), Supply Chain Risk Management (SCRM) plans, and Counterfeit Prevention Plan(s)
Document supply chain vulnerability and risk assessment findings and recommend mitigations or countermeasures
Develop or refine Hardware/Software Bill of Materials (HBOM) and perform criticality analysis of system components
Monitor system changes that are impacted through the supply chain
Review system vulnerability scan results and mitigation reports
Support inquiries into suppliers and provide support for supplier auditing
Produce technical documentation, provide briefings, and participate in security-related working groups
Support ongoing authorization efforts by developing supporting documentation and procedures
Provide system security engineering duties as assigned, including technical leadership across program protection, supply chain risk management, and counterfeit parts prevention planning
Work comfortably in an Agile Development environment and serve as a technical liaison, including potential external spokesperson support

Required Qualifications

Experience with U.S. Government System Security Engineering activities, including security requirements engineering, risk assessment and management, secure architecture design, and implementation and verification activities
Experience developing, executing, and managing Program Protection, Supply Chain Risk, and Counterfeit Parts Prevention plans, including criticality analysis of system components
Experience working with the Risk Management Framework (RMF), including development of System Security Plans and Assessment Reports, attack path modeling, and mitigation strategies
Experience providing oversight and guidance to junior engineers and coordinating across IPTs and suppliers or subcontractors for design, development, and test and verification activities
Ability to transfer and maintain a final adjudicated U.S. government Secret clearance (must be in-scope or enrolled in Continuous Evaluation) and maintain required program access within a reasonable period determined by the Company
A DoD 8140.01 qualifying certification such as CompTIA Security+, CISSP, or similar network or security certifications

Preferred Qualifications

Experience with embedded computing environments and technologies
Experience with cloud computing environments and technologies
Experience with Model Based Systems Engineering tools (for example, Cameo or similar tools)
Familiarity with relevant DoD and NIST guidance, including DoDI 5000.02, DoDI 5200.44, DoDI 5000.83, and NIST SP 800-161
Experience applying agile methodologies to the development of cybersecurity capabilities for embedded systems
Experience on multidisciplinary teams and writing technical proposals
Strong communication and interpersonal skills, with the ability to interface across employee and management levels
Familiarity with U.S. Government Anti-Tamper (AT) processes and implementations
Ability to obtain a DoD Top Secret clearance including a Single Scope Background Investigation (SSBI)

Education and Clearance

Education: Bachelor of Science degree in a STEM discipline
Clearance required for start: Yes
Clearance type: Secret
Citizenship: U.S. citizenship is required for positions with a government clearance and certain other restricted roles
Travel: Yes, 10% of the time