Sr. Principal Systems Security Engineer

Northrop Grumman is seeking a Sr. Principal Systems Security Engineer to support hands-on Systems Security Engineering for sensor payloads and secure mission security solutions spanning both hardware and software. This is a full-time, on-site role in San Antonio, TX, with travel up to 10% and Secret clearance requirements.

In this position, you will help architect and validate Anti-Tamper and Cybersecurity solutions, support secure architecting aligned to government policies, and contribute to release and exportability efforts for international markets. The work emphasizes rigorous engineering practices, coordination with government and program teams, and ongoing professional growth through communities of practice.

Responsibilities

• Apply full life cycle Systems Engineering experience for Anti-Tamper and/or Cybersecurity, including architecture design, trade studies, requirements formulation, detailed design, unit testing, system testing, and verification and validation practices.
• Support development and implementation of hardware and software Anti-Tamper and/or Cybersecurity techniques and countermeasures to protect assets and strengthen operational integrity and reliability.
• Ensure compliance with US Government policies (including JSIG, DAAPM, NIST 800-53, CNSSI 1253, DODI 5200.39, and others) by supporting secure system architecting, tailoring controls, approving documented procedures and artifacts, and overseeing security testing and analysis.
• Perform analyses to validate existing security requirements and identify additional safeguards to enhance system security.
• Collaborate with US Government and program teams to negotiate and develop Anti-Tamper and CyberSecurity solutions for international export markets, ensuring security requirements align with Tri-Service Committee and Red Team needs for US-deployed and exported military systems.
• Use reverse engineering to architect and validate effective security Anti-Tamper and/or CyberSecurity solutions.
• Conduct Technical Release Analyses in accordance with US Government security governance, service policies, and licensing precedents, including assessments and certification of Controlled Unclassified Information and higher information and Critical Program Information determinations for licensing.
• Coordinate Technology Release efforts with program personnel, including engagement with relevant stakeholders and SMEs and delivery of training on Technology Release processes.
• Manage and communicate system, subsystem, and sensor exportability analyses and modifications to ensure international standards compliance.
• Apply intermediate knowledge of cryptographic security protocols to help protect sensitive information.
• Support formal Security Test and Evaluation (ST&E) processes through pre-test preparation, participation in testing, results analysis, and report preparation.
• Document assessment and authorization findings and maintain Security Plans, including updates to the Plan of Actions and Milestones (POA&M).
• Support strategic planning for Anti-Tamper and CyberSecurity technology development aligned to global priorities and influencing current and future policies.
• Partner with program and global Business Development stakeholders to incorporate international requirements into design processes and support product line initiatives for global market success.
• Actively participate in communities of practice to strengthen domain knowledge and support continuous professional development.

Requirements

• Bachelor’s degree in a Science, Engineering, or Mathematics field with 8 years of related experience; OR Master’s degree in a STEM field with 6 years of related experience; OR PhD in a STEM field with 4 years of related experience.
• 2 (3) years of Systems Engineering experience with DoD platforms, systems, sensors, and/or sub-systems (examples include EO/IR, embedded software or cryptography, satellites, architecture development, hardware design, RF, radar, and undersea sensors).
• 2 (3) years of experience with requirements development, derivation, system integration & test, and verification and validation.
• 2 (3) years of experience in one or more areas such as Anti-Tamper or Cybersecurity; Cybersecurity Risk Management Framework; Cybersecurity Resiliency; Reverse Engineering; security requirements development; system security integration & testing; security validation and verification.
• US Citizen with ability to obtain and maintain a minimum of a Secret Clearance with additional customer-specified clearance requirements.

Technologies

• NIST 800-53, CNSSI 1253, JSIG, DAAPM, DODI 5200.39
• Cryptographic security protocols
• Cybersecurity Risk Management Framework
• Tri-Service Committee, Red Team
• Controlled Unclassified Information, Critical Program Information
• Plan of Actions and Milestones (POA&M)
• Security Test and Evaluation (ST&E)

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on the position, eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and allow employees to share in company results
• Vice President or Director positions may be eligible for Long Term Incentives

Additional Information

• Relocation assistance may be available
• Travel: Yes, up to 10% of the time
• Clearance type: Secret
• Salary range: USD 129,300 - 193,900 per year

Preferred Qualifications

• Advanced degrees in Science, Technology, Engineering or Mathematics or related technical fields
• Active Secret or Top-Secret clearance
• Experience with Systems Security Engineering development of DoD weapon systems
• Experience with Hardware (Firmware) Assurance, Attack Surface Analysis and Reporting, Software/Firmware Encryption, and Secure Key Handling
• Experience identifying and mitigating software vulnerabilities and performing integration testing of mitigations
• Experience contributing to and/or making technical presentations to internal and external customers