Systems Security Engineer

Northrop Grumman’s Systems Engineering organization in Oklahoma City, OK is seeking a Systems Security Engineer (Principal or Senior Principal) to support System Security Engineering across the acquisition and development lifecycle. In this role, you will help strengthen program protection by addressing supply chain risk management and counterfeit parts prevention, aligned to U.S. Government standards and processes.

This position requires a Secret clearance and includes work that follows frameworks such as NIST, CNSSI, and RMF processes. The role is conducted onsite in Oklahoma City, with travel of 10% of the time, and start timing is subject to program funding confirmation.

Key Responsibilities

• Apply experience in Program Protection, Supply Chain Risk, and conduct supply chain vulnerability and risk assessments
• Develop and/or update Program Protection Implementation Plan(s), Supply Chain Risk Management (SCRM) plans, and Counterfeit Prevention Plan(s)
• Perform supply chain vulnerability and risk assessments, document findings, and recommend mitigations/countermeasures
• Develop and refine Hardware/Software Bill of Materials (HBOM) and conduct Criticality Analysis of system components
• Monitor system changes that are impacted through the supply chain
• Review system vulnerability scans and mitigation reports
• Support inquiries and auditing of suppliers
• Provide systems security engineering methods and techniques to support technical execution and mission assurance
• Prepare technical documents, provide briefings, and participate in security-related working groups while supporting ongoing authorization efforts
• Serve as a technical liaison and, when needed, an external spokesperson, interfacing with cyber functional areas, company management, and executives
• Comfortably operate in an Agile Development environment
• Provide technical leadership in Program Protection (countermeasures), Supply Chain Risk Management, and Counterfeit Parts Prevention planning activities, including support for junior engineers and different IPTs and suppliers/subcontractors

Required Qualifications

• Experience with U.S. Government System Security Engineering activities, including security requirements engineering, risk assessment and management, secure architecture design, and implementation and verification activities
• Experience developing, executing, and managing Program Protection, Supply Chain Risk, and Counterfeit Parts Prevention plans, plus performing Criticality Analysis of system components
• Experience with Risk Management Framework (RMF), including development of System Security Plans, Assessment Reports, attack path modeling, and mitigation strategies
• Experience working with and providing oversight and guidance to junior engineers and different IPTs and suppliers/subcontractors across design development, implementation, and test/verification activities
• Ability to transfer and maintain a final adjudicated U.S. government Secret clearance (in-scope or enrolled in Continuous Evaluation) and any required program access within a reasonable period of time, as determined by the Company
• DoD 8140.01 qualifying certification such as CompTIA Security+, CISSP, or similar network/security certifications

Technologies

• CompTIA Security+
• CISSP
• Attack path modeling
• Hardware/Software Bill of Materials (HBOM)
• RMF
• Agile Development

Preferred Qualifications

• Experience with embedded computing environments and technologies
• Experience with cloud computing environments and technologies
• Experience with Model Based Systems Engineering tools such as Cameo or similar system modeling tools
• Familiarity with DoDI 5000.02, DODI 5200.44, DoDI 5000.83, NIST SP 800-161, and DoD Program Protection Plan and Guidance
• Experience applying agile methodologies to development of cybersecurity capabilities for embedded systems
• Experience working on multidisciplinary teams and writing technical proposals
• Excellent communication and interpersonal skills for interfacing with employees and management at all levels
• Familiarity with U.S. Government Anti-Tamper (AT) processes and implementations
• Ability to obtain a DoD Top Secret security clearance to include a Single Scope Background Investigation (SSBI)

Compensation, Clearance, and Logistics

• Location: Oklahoma City, OK (onsite)
• Travel: Yes, 10% of the time
• Clearance required to start: Yes
• Clearance type: Secret
• Estimated application period: 20 days from the job posting date
• Program contingency: Opportunity is contingent on program funding; start dates are determined after funding confirmation

Salary ranges: Primary level $102,600.00 - $153,800.00; Secondary level $127,900.00 - $191,900.00.

Basic Qualifications by Level

• Principal Systems Engineer: Bachelor of Science in a STEM discipline and 5 years of experience, or Master of Science in STEM and 3 years, or PhD in STEM and 1 year
• Sr. Principal Systems Engineer: Bachelor of Science in STEM and 8 years of experience, or Master of Science in STEM and 6 years, or Doctorate in STEM and 4 years

Education

A Bachelor of Science degree in a STEM discipline is required (as referenced for the role).

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Company paid holidays
• Paid time off (PTO) for vacation and/or personal business
• Depending on position: eligibility for overtime, shift differential, and a discretionary bonus in addition to base pay
• Annual bonuses designed to reward individual contributions and share in company results
• Vice President or Director positions may be eligible for Long Term Incentives

Relocation and Citizenship

• Relocation assistance: May be available
• Citizenship/clearance eligibility: U.S. Citizenship is required for positions with a government clearance and certain other restricted roles