Attack Path Modeling Engineer Jobs

1 job found

Today

Systems Security Engineer

Northrop Grumman Oklahoma City, OK

Oklahoma City, OK

Today

$103k - $192k/yr Full time Attack Path Modeling Counterfeit Prevention Information Security

Apply Now

Job Description

Northrop Grumman’s Systems Engineering organization in Oklahoma City, OK is seeking a Systems Security Engineer (Principal or Senior Principal) to support System Security Engineering across the acquisition and development lifecycle. In this role, you will help strengthen program protection by addressing supply chain risk management and counterfeit parts prevention, aligned to U.S. Government standards and processes.

This position requires a Secret clearance and includes work that follows frameworks such as NIST, CNSSI, and RMF processes. The role is conducted onsite in Oklahoma City, with travel of 10% of the time, and start timing is subject to program funding confirmation.

Key Responsibilities

Apply experience in Program Protection, Supply Chain Risk, and conduct supply chain vulnerability and risk assessments
Develop and/or update Program Protection Implementation Plan(s), Supply Chain Risk Management (SCRM) plans, and Counterfeit Prevention Plan(s)
Perform supply chain vulnerability and risk assessments, document findings, and recommend mitigations/countermeasures
Develop and refine Hardware/Software Bill of Materials (HBOM) and conduct Criticality Analysis of system components
Monitor system changes that are impacted through the supply chain
Review system vulnerability scans and mitigation reports
Support inquiries and auditing of suppliers
Provide systems security engineering methods and techniques to support technical execution and mission assurance
Prepare technical documents, provide briefings, and participate in security-related working groups while supporting ongoing authorization efforts
Serve as a technical liaison and, when needed, an external spokesperson, interfacing with cyber functional areas, company management, and executives
Comfortably operate in an Agile Development environment
Provide technical leadership in Program Protection (countermeasures), Supply Chain Risk Management, and Counterfeit Parts Prevention planning activities, including support for junior engineers and different IPTs and suppliers/subcontractors

Required Qualifications

Experience with U.S. Government System Security Engineering activities, including security requirements engineering, risk assessment and management, secure architecture design, and implementation and verification activities
Experience developing, executing, and managing Program Protection, Supply Chain Risk, and Counterfeit Parts Prevention plans, plus performing Criticality Analysis of system components
Experience with Risk Management Framework (RMF), including development of System Security Plans, Assessment Reports, attack path modeling, and mitigation strategies
Experience working with and providing oversight and guidance to junior engineers and different IPTs and suppliers/subcontractors across design development, implementation, and test/verification activities
Ability to transfer and maintain a final adjudicated U.S. government Secret clearance (in-scope or enrolled in Continuous Evaluation) and any required program access within a reasonable period of time, as determined by the Company
DoD 8140.01 qualifying certification such as CompTIA Security+, CISSP, or similar network/security certifications

Technologies

CompTIA Security+
CISSP
Attack path modeling
Hardware/Software Bill of Materials (HBOM)
RMF
Agile Development

Preferred Qualifications

Experience with embedded computing environments and technologies
Experience with cloud computing environments and technologies
Experience with Model Based Systems Engineering tools such as Cameo or similar system modeling tools
Familiarity with DoDI 5000.02, DODI 5200.44, DoDI 5000.83, NIST SP 800-161, and DoD Program Protection Plan and Guidance
Experience applying agile methodologies to development of cybersecurity capabilities for embedded systems
Experience working on multidisciplinary teams and writing technical proposals
Excellent communication and interpersonal skills for interfacing with employees and management at all levels
Familiarity with U.S. Government Anti-Tamper (AT) processes and implementations
Ability to obtain a DoD Top Secret security clearance to include a Single Scope Background Investigation (SSBI)

Compensation, Clearance, and Logistics

Location: Oklahoma City, OK (onsite)
Travel: Yes, 10% of the time
Clearance required to start: Yes
Clearance type: Secret
Estimated application period: 20 days from the job posting date
Program contingency: Opportunity is contingent on program funding; start dates are determined after funding confirmation

Salary ranges: Primary level $102,600.00 - $153,800.00; Secondary level $127,900.00 - $191,900.00.

Basic Qualifications by Level

Principal Systems Engineer: Bachelor of Science in a STEM discipline and 5 years of experience, or Master of Science in STEM and 3 years, or PhD in STEM and 1 year
Sr. Principal Systems Engineer: Bachelor of Science in STEM and 8 years of experience, or Master of Science in STEM and 6 years, or Doctorate in STEM and 4 years

Education

A Bachelor of Science degree in a STEM discipline is required (as referenced for the role).

Benefits

Health insurance coverage
Life and disability insurance
Savings plan
Company paid holidays
Paid time off (PTO) for vacation and/or personal business
Depending on position: eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
Annual bonuses designed to reward individual contributions and share in company results
Vice President or Director positions may be eligible for Long Term Incentives

Relocation and Citizenship

Relocation assistance: May be available
Citizenship/clearance eligibility: U.S. Citizenship is required for positions with a government clearance and certain other restricted roles

View full job page →

Get Attack Path Modeling Engineer Jobs alerts

New Attack Path Modeling Engineer Jobs, daily.