Sr. Principal​/Principal Product Security Engineer

RELOCATION ASSISTANCE:
Relocation assistance may be available

CLEARANCE REQUIRED FOR START:
Yes

CLEARANCE TYPE:
Top Secret

TRAVEL:
Yes, 10% of the Time

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon.

We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Product Security Engineer (TS/SCI)

We are seeking a Product Security Engineer to join our Product Security Engineering team supporting the secure development and authorization of mission-critical spacecraft and flight software. In this role, you will help build and lead the product security of space vehicles (SVs), including their flight software; guidance, navigation, and control (GNC) software; simulation platforms; embedded systems; and the engineering platforms used to develop and deliver these products to the customer.

You will work closely with software, systems, Dev Ops, and cybersecurity engineers to embed security throughout the product lifecycle, from architecture and design through implementation, test, release, and onboarding to a ground system. You will lead hands‑on security engineering activities such as threat modeling, attack surface analysis, secure design and code reviews, vulnerability triage, and software supply‑chain risk management. You will also help integrate and improve automated security capabilities in Git Lab CI, Jenkins, or similar build and delivery pipelines, including SAST, software composition analysis, SBOM generation, secrets scanning, and other security analyses.

This role is equally focused on building security into the engineering workflow and enabling the program's Risk Management Framework (RMF) authorization effort. You will develop and maintain key RMF artifacts, partner with technical teams to implement and document security controls and help drive the SV through obtaining an Authorization to Operate (ATO).

The ideal candidate is a software engineer at heart who has developed deep security expertise: someone comfortable reading and discussing C/C++ code; writing useful automations using Python, Go, or a similar language; working directly with software engineers to resolve real risks; and improving tooling and processes rather than relying solely on manual activities. You will be expected to bring sound engineering judgement, take ownership of complex security problems, and make security practical, scalable, and effective for engineering teams.

This position is 100% on‑site in Dulles, Virginia and requires an active TS/SCI security clearance.

• Collaborate with engineering, program, systems, and cybersecurity stakeholders to review and improve product‑security processes across development, test, governance, and authorization activities.
• Serve as a hands‑on product security partner to embedded software, Dev Ops, and ground/supporting software teams throughout the software development lifecycle.
• Advise software development teams on secure coding practices, secure architecture, embedded system security design, software supply‑chain security, and CI/CD pipeline security.
• Conduct security assessments…