Cyber Systems Engineer Cyber A&A Engineer (24-430)

$87,200 - $130,800/Yr

Northrop Grumman - Colorado Springs, CO

Full-time - Entry Level

Colorado Springs, CO

5,001-10,000 employees

Computer and Electronic Product Manufacturing

About the position

The Cyber Systems Engineer - Cyber A&A Engineer position at Northrop Grumman involves supporting the C2BMC Operational ISSOs and ensuring the C2BMC fielded system maintains appropriate Authorization for Connection, Test, and Operational purposes. The role focuses on Cyber Products analysis, vulnerability mitigation, and management of the eMASS packages, requiring collaboration with various stakeholders to deliver on contract schedules. The candidate will engage in technical documentation, risk analysis, and support for authorization packages, contributing to the overall cybersecurity posture of the organization.

Responsibilities

• Communicate and work closely with C2BMC Operational ISSOs in support of Operational eMASS packages.
• Assist with Cyber Products analysis and vulnerability mitigation.
• Manage POA&M to ensure successful delivery of eMASS Packages, Ports Protocols, and Services (PPS).
• Rotate and blend technical documentation for authorization packages in eMASS.
• Assess vulnerabilities and engineer responses for system POA&Ms.
• Provide proposal support and conduct risk analysis for Risk Acceptance Requests (RARs).

Requirements

• An active Secret clearance is required to start.
• Bachelor's Degree in a STEM discipline preferred from an accredited university and 2 years of related experience, or a Master's degree and 0 years of experience, or a PhD and 0 years of experience, or 6 years of related experience in lieu of a degree may be considered.
• DoD 8140 certification at IAT Level II or higher is required to start.
• Requires security engineering skills with a working knowledge of Information Assurance (IA) technology, NIST standards, DoDI 8500.2, and Risk Management Framework (RMF) Security Controls.
• Experience in the Agile Development Lifecycle, including generating requirements, designing architecture, configuring Cyber audit tools, conducting verification, and performing Cyber vulnerability and configuration activities.
• Excellent technical document preparation and verbal communication skills are required.

Nice-to-haves

• Application experience hardening Windows and Linux servers and workstations in accordance with GPOs, IAVMs, and STIGs.
• Network design and software engineering backgrounds are a plus.
• Recent hands-on experience with Agile execution, tools, and methodologies is highly preferred.
• Experience with Scripting Languages such as Python and PowerShell for data analysis and cyber vulnerability analysis is highly desired.
• Familiarity with vulnerability scanning and analysis tools such as ACAS, Evaluate-STIG, STIG Manager, and Trivy.

Benefits

• Health Plan
• Savings Plan
• Paid Time Off
• Education Assistance
• Training and Development
• Flexible Work Arrangements