below marketmost similar roles pay hereabove market
This role pays less than
89%
of similar roles. Most pay
$165,953–$221,250
— the blue band above.
At the midpoint, this role pays about
$142k
versus about
$194k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
739 open roles
on FindRole.
Listed pay typically runs
$117,500–$176,300
across 316 roles with salary data.
The Principal Cyber Systems Engineer joins the cybersecurity team to lead and optimize the program cybersecurity suite for a new mission onboarding into a pre-existing ecosystem. This role involves developing and decomposing software security requirements, designing technical architectures, and providing oversight for secure systems. Key responsibilities include bridging systems engineering and compliance by developing engineering test procedures to meet Risk Management Framework and Authority to Operate requirements. The engineer will support secure infrastructure, CI/CD pipelines, and private cloud accreditation. Required skills include proficiency with NIST 800-37, NIST 800-53, and OWASP Top 10. The role utilizes tools like Fortify, Trellix, ACAS, and Splunk. The work involves integrating space vehicle hardware into operational ground accreditation and managing software security within a Software Development LifeCycle.
Lead the design, development, and implementation of secure systems within an Agile engineering environment.
Develop and decompose software security requirements, technical architectures, and system designs for integrated product teams.
Create RMF artifacts including System Security Plans, Risk Assessment Reports, and Security Controls Traceability Matrices.
Conduct security assessments of mission software applications through code reviews and vulnerability assessments.
Advise software development teams on secure coding practices and cybersecurity for containerized environments and CI/CD pipelines.
Implement security tools and automation for static/dynamic code analysis, dependency scanning, and continuous monitoring.
Coordinate with vehicle vendors to integrate space vehicle hardware into operational ground accreditation.
Perform software patch installations, flaw remediation, and antivirus updates to maintain continuous monitoring.
What we're looking for
Must possess an active Top Secret security clearance and be SCI eligible at the time of application.
Must be a U.S. citizen.
Must have a Bachelor’s degree in a STEM field with 5 years of relevant experience, a Master’s degree in a STEM field with 3 years, or a PhD with 0 years.
Must possess a CISSP, CSSLP, CASP, CISM, or equivalent certification.
Must have experience with Cloud Security and best practices.
Must have demonstrated knowledge of Software Development Lifecycle (SwDLC), Systems Engineering Review Processes, and System/Software Accreditation Milestones.
Must understand NIST 800-37, NIST 800-53, and OWASP Top 10 security controls.
Must have technical leadership and/or mentorship experience.
Must have 2+ years of experience in the Defense Space Industry (preferred).
Must have experience and/or certification in Earned Value Management (EVM) (preferred).
Must have experience in Application Security, Software Development, DevOps, and/or related fields (preferred).
Must have familiarity with Zero-Trust Security Principles and Implementation Approaches (preferred).
Risk Management Framework (RMF)
CMMC
IDS/IPS
COMSEC
EMSEC
OPSEC
Network Protocols
Splunk
ACAS
ESS
Red Hat Enterprise Linux
Windows
NIST 800-series
DoD STIG
Security+
Automation
Systems Engineering Lifecycle
System Security Engineering
Risk Management Framework (RMF)
NIST
CNSSI
DoD
Cybersecurity Architecture
Model Based Systems Engineering
Cameo
Agile
Cloud Computing
Embedded Systems
CompTIA Security+
CISSP
Attack Path Modeling
Anti-Tamper (AT)