Cyber Systems Engineer; Principal or Senior Principal Level

Relocation assistance may be available.

Clearance required for start:
Yes.

Clearance type:
Secret.

Travel:
Yes, 10% of the time.

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation’s history—from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon.

We look for people who have bold new ideas, courage, and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity, and bringing your whole self to work—and we have an insatiable drive to do what others think is impossible.

Northrop Grumman’s Aeronautics Systems sector is seeking a Cyber Systems Engineer (Principal or Senior Principal Level) to join our team of qualified, diverse individuals in defining the future. This position will be located in Rancho Bernardo, CA or Redondo Beach, CA.

In this role, you will play a pivotal role in both new system development and the ongoing sustainment of existing platforms by applying a solid working knowledge of the Risk Management Framework (RMF) to identify, assess, and mitigate cybersecurity risks. You will design, develop, integrate, test, and verify system‑security solutions, ensuring that each RMF step, from categorization through continuous monitoring, produces the required artifacts:
Security Assessment Plan (SAP), Security Assessment Report (SAR), Risk Assessment Report (RAR), System Security Plan (SSP), Plan of Action & Milestones (POA&M), Security Control Traceability Matrix (SCTM), and Continuous Monitoring (Con Mon) documentation needed to obtain and sustain an Authority to Operate (ATO).

This role requires hands‑on experience with NIST SP800‑53 and a solid understanding of the Systems Development Life Cycle (SDLC), including the key engineering milestones (PDR, CDR, SFR, TRR) and the associated cybersecurity deliverables required at each engineering phase. The ideal candidate will be proficient in creating and maintaining the full suite of compliance documentation, adept at embedding security controls directly into development pipelines, and possess strong communication skills to work effectively with architects, developers, program managers, and auditors throughout the acquisition and systems development life cycles.

• Direct experience developing RMF assessment and authorization artifacts in accordance with NIST SP 800-37
• Hands on experience using security compliance tools (e.g., ACAS, SCAP, STIG, SCC)

• Principal Cyber Systems Engineer (T03): Must have a Bachelors degree in a STEM field and at least 5 years of relevant military/professional experience in Engineering, OR a Master’s Degree in a STEM field and at least 3 years of relevant military/professional experience in Engineering, OR a PhD and at least 1 year of relevant military/professional/academic experience in Engineering.
• Senior Principal Level (T04): Must have a Bachelors degree in a STEM field and at least 8 years of relevant military/professional experience in Engineering, OR a Master’s Degree in a STEM field and at least 6 years of relevant military/professional experience in Engineering, OR a PhD and at least 4 years of relevant military/professional experience in Engineering.
• Must have an active US Government Secret or higher clearance (with a background investigation completed within the last 6 years or currently enrolled into Continuous Evaluation).
• Must have the ability to obtain and maintain Special Access Program (SAP) clearance within a reasonable amount of time as determined by business needs.

• Direct Experience utilizing NIST 800-160 system security engineer and the system development life cycle.
• Prior experience with Cyber Survivability Endorsement Implementation Guide (CSEG), and Cyber Resiliency.
• Implement and review the application of cybersecurity profile stereotypes to…