Principal Cyber Sys Engineer – Cyber Patching-Red Hat Satellite (24-510)

Requisition ID: R

• Category: Information Technology

• Location: Colorado Springs, Colorado, United States of America | Huntsville, Alabama, United States of America

• Clearance Type: Secret

• Telecommute: No - Teleworking not available for this position

• Shift: Days (United States of America)

• Travel Required: Yes, 10% of the Time

• Positions Available: 1

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history. We look for people who have bold new ideas, courage, and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity, and bringing your whole self to work.

Northrop Grumman Space Systems – Launch and Missile Defense Systems has an exciting career opportunity for a Principal Cyber Sys Engineer – Cyber Patching-Red Hat Satellite (24-510) to join our team of qualified, diverse individuals. This position will be located in Colorado Springs, CO, or Huntsville, AL.

Position Overview:

The Command and Control, Battle Management, and Communications (C2BMC) program integrates the Missile Defense System. It is a vital operational system that enables the U.S. president, secretary of defense, and combatant commanders to systematically plan ballistic missile defense operations and manage designated networked sensors and weapons systems to achieve mission objectives.

This position fulfills a Cyber Engineering technical role in support of the C2BMC program. The selected candidate will develop and test patches to fix Software, Hardware, and Firmware vulnerabilities, focusing on vulnerability management, including analysis and remediation of IAVMs , Cyber Tasking Orders (CTOs ), Common Vulnerabilities and Exposures (CVEs ), Vendor Patches , and STIG configurations.

Essential Functions:

• Install and configure Linux from the OS up to the application level

• Documentation and verification of all installation and configuration steps for the labs

• Develop test plans/procedures for software integration and unit tests

• Work with software developers and/or vendors to help diagnose and identify root causes of problems found during system integration

• Submit problem reports for errors found per Agile processes and coordinate daily integration activities with other Agile Release Trains (ARTs)

• Responsible for developing and implementing Cyber Releases in the National Team labs, C2BMC Test Facility, and Operations

• Installing and unit testing Cyber Products

• Provide redlines to engineers and feedback to Cyber Leadership

• Documenting lessons learned, best security engineering practices, and industry standards

Basic Qualifications:

• An active Secret clearance is required to start

• Bachelor’s Degree in Science, Technology, Engineering, or Mathematics discipline preferred from an accredited university and 5 years of related experience, or a Master’s degree and 3 years of experience, or a PhD and 1 year of experience, or 9 years of related work experience in lieu of a degree may be considered

• DoD 8140 certification at IAT Level II or higher (Security+, GSEC, SCNP, SSCP, CISSP, CISA, GSE, SCNA) is required to start

• Experience configuring and patching Linux systems with Red Hat Satellite and Capsules

• Hands-on experience in:

  • Scripting

  • Installing

  • Testing patches on Linux hosts

  • Application experience with writing and deploying Ansible playbooks

  • Knowledge of executing Security Hardening on LINUX Operating Systems based on approved DISA STIGs and SRGs

  • Technical troubleshooting of COTS software applications, data analytics of system vulnerabilities, and risk mitigation resulting in system authorization

Preferred Qualifications:

• Executing Agile tasks throughout a System Development Lifecycle

• Familiarity with Scripting Windows Group Policy Objects (GPOs)

• Hands-on experience with industry-standard Cybersecurity tools:

• Security Content Automation Protocol (SCAP )

• NESSUS

• Assured Compliance Assessment Solution (ACAS )

• Demonstrated experience analyzing and implementing NIST SP 800-53 Security Controls of Risk Management Framework (RMF) implementation across multiple phases of the mission system

What We Can Offer You:

Northrop Grumman provides a comprehensive benefits package and a work environment that encourages your growth and supports the mutual success of our people and our company. Your benefits will include the following:

• Health Plan

• Savings Plan

• Paid Time Off

• Education Assistance

• Training and Development

• Flexible Work Arrangements

Northrop Grumman is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.