Cyber Systems Engineer; S

Position Overview

Staff Cyber Systems Engineer – Annapolis Junction, MD (Northrop Grumman Mission Systems, Cyber Defense Cyber Team)

We are looking for a Cybersecurity Systems Engineer (CSSE) to support the Sentinel program across multiple locations, ensuring cyber survivability attributes are embedded in system designs.

• No relocation assistance available
• Clearance required for start:
  Yes (Secret, Top Secret with SAP possible)
• Travel:
  Yes, 10% of the time

• Implement weapon system requirements to ensure cyber survivability and assess customer cybersecurity requirements.
• Decompose, derive, and refine system cybersecurity requirements at all levels to drive built-in protections.
• Guide/support security layout, architecture, and tool selection/development.
• Evaluate and assess implementations to identify security risks, attack surface, and verify protection integration.
• Support verification efforts ensuring functional, effective, and complete cybersecurity protections.
• Define security governance and risk management.
• Provide technical decisions and guidance to support program delivery and flight testing.
• Collaborate with other program systems engineers to accomplish cyber requirements.
• Participate in launch and missile defense system enhancements.
• Ensure compliance with contractual cybersecurity standards (CNSSI
  1253, DoD
  8570, DoD
  8510, AFI
  17‑101).
• Propose and design cyber architecture changes with traceability to requirements.
• Develop and document technical standard engineering processes and procedures.
• Conduct cyber-attack surface analysis and recommend mitigation.
• Participate in cybersecurity assessment activities and review assessment methods.
• Provide input to program milestones and metrics.
• Research and implement solutions to resolve cybersecurity challenges.

• Bachelor’s degree with 12 years experience, Master’s with 10 years, PhD with 8 years in Systems Engineering, Computer Engineering, Computer Science, Cybersecurity Engineering, or related fields; or 18 years experience in lieu of a degree.
• Direct experience with NIST
  800‑160 system security engineering and SDLC.
• Experience with SOW, requirements, architecture, design, implementation, integration, verification & validation, field test.
• Direct experience developing RMF assessment and authorization documentation.
• Current DoD
  8570 IASAE LevelII (CISSP) certification and ability to obtain LevelIII within 6 months of hire.
• Active Secret clearance with ability to obtain Top Secret with SAP access.

• System security architecture experience.
• Experience with DOORS and CAMEO.
• Knowledge of security tool suites in Dev Sec Ops  pipeline (Sonar Qube, Fortify, etc.).
• Familiarity with SSE documentation (Cybersecurity Strategies, Information Support Plans, PPPs, etc.).
• Familiarity with Anti‑Tamper Plans, Counterintelligence Support Plans, Integrated Threat Assessment Reports, OSPs, Continuous Monitoring Plans, Defensive Cyberspace Operations Plans, Enterprise Architecture Views, NISTSP
  800‑160.
• DoD
  8570 IASAE III (ISSEP, ISSAP) certification.
• Experience with Agile methodologies.
• Active TS/SCI clearance.

Northrop Grumman offers a comprehensive benefits package, including health and dental plans, savings plan, paid time off, education assistance, training and development, 9/80 work schedule (where available), and more.

Primary Level Salary Range: $ – $ (adjusted for scope, responsibilities, experience, education, and market conditions). Eligible for overtime, shift differential, discretionary bonuses, and potential long‑term incentives.

Application period is estimated to be 20 days from posting date but may vary. U.S. citizenship is required for all positions with a government clearance.

Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit