Cyber Systems Engineer (Level 2 OR 3)

Position Overview

Northrop Grumman Space Systems is seeking a knowledgeable and proactive Cyber Systems Engineer to lead project-based test events focused on identifying, assessing, and mitigating system vulnerabilities while ensuring compliance with cybersecurity policies, procedures, and mandates. In this role, you will perform compliance audits, vulnerability assessments, and security certification tests, as well as develop and maintain critical documentation such as Security Plans and POA&Ms. You will collaborate with internal stakeholders and government representatives to monitor and enhance the security posture of systems, assign corrective tasks, and provide regular updates. The position requires expertise in security compliance frameworks (e.g., NISPOM, DCID 6-3) and effective oversight of risk mitigation and accreditation processes. This role requires approximately 20% travel to both CONUS and OCONUS and is based in Colorado Springs, CO, eligible for Level 2 or 3 roles.

Key Responsibilities

• Perform system and network assessments to identify deviations from configurations, policies, or standards through compliance audits and vulnerability assessments.
• Establish and enforce program control processes to mitigate risks and obtain system certifications and accreditations.
• Conduct security analyses to validate and recommend enhancements to established security requirements.
• Support Security Test and Evaluation (ST&E) efforts, including preparation, execution, analysis of results, and reporting.
• Develop and maintain required security documentation, including Security Plans and POA&Ms.
• Periodically review system audit logs and track corrective actions to completion.
• Lead project-based cybersecurity test events with internal stakeholders and government representatives.
• Evaluate system security posture and ensure compliance with cybersecurity policies, procedures, and mandates.
• Assign and track remediation tasks to system administrators, ensuring accurate fixes and corrective actions.
• Provide regular status updates and reports to internal teams and government customers.

Required Qualifications

• For Cyber Systems Engineer (Level 2): Bachelor of Science degree in a STEM discipline with 2 years of relevant experience, OR a Master of Science degree in a STEM discipline.
• For Principal Cyber Systems Engineer (Level 3): Bachelor of Science degree in a STEM discipline with 5 years of relevant experience, OR a Master of Science degree in a STEM discipline with 3 years of experience, OR 1 year of experience with a PhD in a STEM discipline.
• Active DoD Secret clearance at the time of application.
• Must have ability to obtain DoD 8570/8140 Level 2 Certification (e.g., Security+ CE) within 6 months of start.
• Experience working in an Agile or DevOps environment in areas such as cybersecurity, requirements development, systems engineering, product design, system integration, or test.
• Experience with ACAS and STIGs.
• Familiarity with NIST 800-53 and other NIST and DOD guidance.
• Hands-on experience in one of the following cyber engineering disciplines: cybersecurity principles, security components, implementation, or testing.
• Project management experience.

Preferred Qualifications

• PenTest certified (GPEN, Pentest+, CPENT, HTB CPTS, etc.).
• Familiarity with computer architecture and applications.
• Experience with RHEL operating systems, virtualization, and system administrator functions.
• Experience with contract requirement language and addressing those requirements.
• Experience conducting integration and verification testing through formal test acceptance and sign off.
• Experience working with Government contracts and customer representatives.