Sentinel - Information Assurance Engineer (level 2 or 3)

Information Assurance Engineer/Principal Information Assurance Engineer

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Join Northrop Grumman on our continued mission to push the boundaries of possible across land, sea, air, space, and cyberspace. Enjoy a culture where your voice is valued and start contributing to our team of passionate professionals providing real-life solutions to our world's biggest challenges. We take pride in creating purposeful work and allowing our employees to grow and achieve their goals every day by Defining Possible. With our competitive pay and comprehensive benefits, we have the right opportunities to fit your life and launch your career today.

Northrop Grumman Defense Systems (Systems Security Engineering – SSE is hiring an Information Assurance Engineer (level 2)/Principal Information Assurance Engineer (level 3) to join its team in Roy, Utah. This position will support Program Protection and Supply Chain Risk Management on the Sentinel Program. Northrop Grumman supports the Air Force's sustainment, development, production and deployment of hardware and system modifications for Intercontinental Ballistic Missile (ICBM) Ground and Airborne Launch Control Systems, Launch Facilities and associated infrastructure.

What you will get to do :

The selected engineer will be responsible for performing system security threat assessments and risk mitigation for the overall program, supply chain elements, processes, and actors and provide results.

Specific duties to include, but are not limited to the following:

• Designs and implements information assurance and security engineering systems with requirements of business continuity, operations security, cryptography, forensics, regulatory compliance, internal counterespionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management).
• Establishes and implements system security designs; additionally, you will assess and mitigate system security threats and risks throughout the program life cycle.
• Validates system security requirements definition and analysis. Verifies security requirements; performs system certification and accreditation planning and testing and liaison activities.
• Execute completion Statement of Work requirements, Program Milestone Exit Criteria, and program maturity commitments.
• In addition to technical skills, you will be a self-starter with strong time management skills. Your organizational skills and ability to anticipate future challenges will serve you well.
• Support MDT with other duties as assigned.

This position may be hired at level 2 or level 3 depending upon applicant qualifications.

Basic Qualifications:

Level 2 Information Assurance Engineer:

• Bachelor's degree and 2 years of experience, 0 years of experience with master's degree. An additional 4 years of experience can be considered in lieu of a degree.
• Must have an active DoD Secret clearance or higher at the time of application.
• Must have the ability to obtain and maintain Special Access Program (SAP) approval within a reasonable period, as determined by the company to meet its business need
• 6 months of internship, school or work experience applying and understanding Systems Security Engineering principles applicable to US Government Defense and/or US Military Programs.
• 6 months of internship, school or work experience with any of the following: operations security, cryptography, forensics, regulatory compliance, internal counterespionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management).
• 6 months of internship, school or work experience researching, interpreting, and developing mitigations for threats and vulnerabilities.
• 6 months of internship, school or work experience showing the ability to communicate effectively and clearly present technical approaches and findings.

Level 3 Principal Information Assurance Engineer:

• Bachelor's degree and 5 years of related experience, 3 years of related experience with master's degree, or 1 year of related experience with PhD. An additional 4 years of experience can be considered in lieu of a degree.
• Must have an active DoD Secret clearance or higher at the time of application.
• Must have the ability to obtain and maintain Special Access Program (SAP) approval within a reasonable period, as determined by the company to meet its business need
• 3 years of applying and understanding Systems Security Engineering principles applicable to US Government Defense and/or US Military Programs.
• 3 years of experience with any of the following: operations security, cryptography, forensics, regulatory compliance, internal counterespionage (insider threat detection and mitigation), physical security analysis (including facilities analysis, and security management).
• 3 years in researching, interpreting, and developing mitigations for threats and vulnerabilities.
• 3 years in showing the ability to communicate effectively and clearly present technical approaches and findings.

Preferred Qualifications :

• Active Top-Secret clearance with SAP Access.
• Direct experience with ICBM Systems
• Experience applying Program Protection principles to US Government Defense Programs and applied knowledge in the application of SSE principles across a broad spectrum of security measures (Cybersecurity, Counterfeit Awareness, Anti-Tamper, HW/SW Assurance, OPSEC, etc.) to protect critical program information (CPI)
• Direct experience conducting supply chain risk management and/or program protection.
• Demonstrated experience with vulnerability management.
• Experience with Model-based Systems Engineering (MBSE) concepts and tools.
• Knowledge of acquisition threat analysis and protection initiatives for acquisition programs.
• Experience developing Systems Security Engineering requirements for hardware and software assurance
• Experience with Risk Management (identification and development of risks) and driving risk mitigations to closure.
• Experience with assessment and analysis of threats, vulnerabilities, and risk for identified mission-critical functions and critical components.
• Experience with Model-based Systems Engineering (MBSE) concepts and tools (CAMEO, DOORS)
• Direct experience conducting supply chain risk management and/or program protection.
• Demonstrated experience with vulnerability management.
• Knowledge of acquisition threat analysis and protection initiatives for acquisition programs.
• Military Intelligence, Law Enforcement, or other USG Intelligence agency experience preferred.

Position Benefits :

As a full-time employee of Northrop Grumman, you are eligible for our robust benefits package including:

• Medical, Dental & Vision coverage
• 401k
• Educational Assistance
• Life Insurance
• Employee Assistance Programs & Work/Life Solutions
• Paid Time Off
• Health & Wellness Resources
• Employee Discounts

This position's standard work schedule is 9/80. The 9/80 schedule allows employees who work a nine-hour day Monday through Thursday to take every other Friday off.