Cyber Systems Engineer (Top Secret) Space Systems (Dulles) - R10194567
Dulles, VA
Full-time
Onsite
$98K/yr - $148K/yr
Entry Level
Northrop Grumman is an aerospace, defense and security company that provides training and satellite ground network communications software. They are seeking an Early Career Cybersecurity Professional to join their Ground Software Integrated Product team, focusing on designing, implementing, and testing secure software solutions for operational mission software applications.
Working in an Agile engineering environment, where the Cyber Systems Engineer may assist identifying and prioritizing security requirements; triage of Static Code Analysis (SCA) tool findings (e.g. Fortify) and assist in prioritizing the findings as technical debt in the Software Development LifeCycle (SwDLC) backlog.
Advising software development scrum teams on secure coding practices, security-focused engineering trade studies, and other security best practices.
Conducting security assessments of mission software applications to include code reviews, vulnerability assessments, application security testing, while contributing to the overall security posture of the system and software architecture
Assist in the development and implementation of security tools and automation processes; to include Static and Dynamic Code Analysis, Software Dependency Scanning, Compliance and Vulnerability Scanning
Developing standard Risk Management Framework (RMF) artifacts, such as System Security Plan (SSP), Risk Assessment Report (RAR), Security Controls Traceability Matrix (SCTM), Plans of Action & Milestones (POA&Ms), and additional security policies and best practices for application security
Conducting system vulnerability scanning, remediation and patch management activities on Windows and Red Hat operating systems and various COTS/GOTS applications, including those within virtualized and/or cloud environments.
Documenting Standard Operating Procedures (SOPs), and when needed, performing software patch installation, other flaw remediation, antivirus updates, and continuous monitoring (ConMon) activities.
Ensuring systems are operated, maintained, and disposed of in accordance with security policies and procedures as outlined in the system security authorization package.
Qualification
Required
Bachelor's Degree in STEM field with 2 years of experience (or 1 year of experience [outside of internships/graduate research/etc.] w/ a Masters, or 1 year [outside of internships/graduate research/etc.] w/ a PhD). Experience can be considered in lieu of degree
Active Top Secret (TS) Security Clearance at time of application
Possess or ability to obtain any DoD 8570 baseline cybersecurity certifications
Exposure to NIST 800-37 (Risk Management Framework), NIST 800-53 (Security and Privacy Controls for Information Systems) and OWASP Top 10 (Web Application Security) as well as the Systems Engineering requirements analysis, decomposition, and analysis process
Experience in Application Security, Software Development, DevOps, Vulnerability Management and/or related field
Demonstrated knowledge of Software Development Lifecycle (SwDLC), Systems Engineering Review Processes, and System/Software Accreditation Milestones
Preferred
Bachelors Degree in Cybersecurity, Computer Science, or Information Systems Management
2+ years of experience in the Defense Space Industry
Experience with Embedded (C/C++), Scripting (Python) and Object-Oriented Programming languages (Java); previous development experience preferred
Familiarity with Zero-Trust Security Principles and Implementation Approaches
CISSP, CSSLP, CASP, CISM or equivalent certification
Flexible Schedules (For example the ability to work a 9/80 work schedule, which allows an employee to work a nine-hour day Monday through Thursday and take every other Friday off of work)
Northrop Grumman is an aerospace, defense and security company that provides training and satellite ground network communications software.
Glassdoor
4.0
Founded in 1994
Falls Church, Virginia, USA
10001+ employees
https://www.northropgrumman.com
Northrop Grumman is an aerospace, defense and security company that provides training and satellite ground network communications software.
