At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.
The Payload and Ground Systems organization within the Northrop Grumman Space Systems pushes the boundaries of innovation, redefines engineering capabilities, and drives advances in various sciences. Our team is chartered with providing the skills, innovative technologies to develop, design, produce and sustain optimized product lines across the sector while providing a decisive advantage to the warfighter. Come be a part of our mission!
The Integration Support Group (ISG) has an immediate need for a Cyber Systems Engineer (T02) to join our large, diverse IT support organization in Redondo Beach, CA. All work will be done inside the SCI Facility in Redondo Beach, CA.
What you'll get to do?
Performs with highly specialized, leading edge information technologies and methodologies
Provides highly technical and specialized guidance concerning automated solutions to complex information processing problems
Performs assessment of systems and networks within a bare-metal and virtual environment and identify where those systems deviate from acceptable configurations, enclave policy, or local policy
Development of high-level and detailed system design artifacts in accordance with DoD architecture framework
Performs compliance audits using STIG Viewer, SCAP, etc and active evaluations such as vulnerability assessments utilizing NESSUS to identify missing patches
Performs Security Technical Implementation Guide (STIG) assessments and hardening for both Windows and Red Hat Enterprise Linux (RHEL) systems, NetApp storage and Cisco networking equipment
Establishes control processes to ensure mitigation of risks and support accreditation of systems
Includes support of process, analysis, coordination, security certification test, security documentation, as well as investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits
Develops and executes test procedures to verify security controls
Performs analyses to validate established security requirements
System analysis activities to include requirements analysis, gap analysis, analysis of alternatives
Develops test plans reflecting how STIG checks are implemented and be able to show expected outcomes of those checks
Updates Risk Management Framework (RMF) artifact documentation to ensure system hardening non-compliant is tracked and remediated
Works with local system and network administrators, developers, test and integration, and other program personnel to coordinate application of system configurations while ensuring no laps of operational functionality
Performs elaborate analyses and studies
Prepares reports and gives presentations
Occasional travel may be required
Active SCI, or TS Clearance with the ability to obtain an SCI prior to start date
Bachelor's degree with 2 years of relevant experience, or a Master's degree; an additional 4 years of experience may be considered in lieu of degree
Experience performing elaborate analyses and studies; preparing reports and giving presentations
Working knowledge of Cyber capabilities such as patch management, host-based security, intrusion detection, security event management, and active/passive system scanning
Wide application of principles, theories, and concepts in their field and provides solutions to a wide range of difficult problems with imaginative and thorough solutions
Experience with Linux & Windows systems
Experience with the Risk Management Framework (RMF)
Knowledge of Modern DevSecOps technologies
Knowledge of Modern Network technologies
Experience working on medium to large complex projects
Experience working fact-finding, analysis, and development of hypothesis/conclusions, production of final reports and delivery of presentations
Demonstrated responsibility for ensuring that the project delivers to ISSM expectations on time and to budget; manage the project work as defined by Projects
Demonstrated performance in highly specialized, leading edge information technologies and methodologies.
Experience providing technical and specialized guidance concerning automated solutions to complex information processing and IT problems
Knowledge and/or experience in: Patch Management, NESSUS, Trellix Endpoint Protection, VMware products, Splunk
Familiarity in the Risk Management Framework (RMF) Cybersecurity Lifecycle to include identifying controls overlays, generating testable requirements, identifying resilient architecture design, configuring, running, and scripting audit tools, providing analysis of vulnerability analyses, conducting verification testing for compliance assessment
In-depth cyber vulnerability analysis experience is highly desired
Hands-on experience with Agile tools and methodologies is highly preferred
DoD 8570 IAT Level II or higher certification (Security+, CASP, CISSP)
Salary Range: $93,500 - $140,300
Employees may be eligible for a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.
Northrop Grumman is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO/AA and Pay Transparency statement, please visit http://www.northropgrumman.com/EEO . U.S. Citizenship is required for most positions.