Job description

RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman Space Systems is seeking a Principal Software Cyber Engineer to serve as the cyber and software security lead on a program developing and fielding a new ground-based radar performing Space Domain Awareness (SDA) missions. As the Software Cyber Engineer lead, you will be a key member of the senior technical team and will be responsible for defining, implementing, and sustaining the software and cybersecurity architecture for mission systems supporting operational execution, software development, and long-term sustainment of the radar system. The ideal candidate will have a strong foundational knowledge of secure software engineering and cybersecurity principles and be able to collaboratively apply systems engineering practices to design, implement, and document robust cyber protections for mission software and supporting services across the program. Designs, develops, documents, tests and debugs applications software and systems that contain logical and mathematical solutions. Conducts multidisciplinary research and collaborates with equipment designers and/or hardware engineers in the planning, design, development, and utilization of electronic data processing systems for product and commercial software. Determines computer user needs; analyzes system capabilities to resolve problems on program intent, output requirements, input data acquisition, programming techniques and controls; prepares operating instructions; designs and develops compilers and assemblers, utility programs, and operating systems. Ensures software standards are met. Basic Qualifications: • Programming languages: Java, Python, JavaScript, C, C++ • Spring Framework • Experience debugging existing software and correcting defects • Familiarity with Agile development methodologies and working in cross-functional scrum teams • Ability to analyze static and dynamic scan results, distinguish actionable security findings from false positives/non-applicable items, and draft technical justifications and remediation plans (POA&M) • Practical experience with secure coding practices and code review to identify common vulnerabilities • Knowledge of CI/CD pipelines and how security gates integrate into build/release processes • Comfortable reading and interpreting security requirements and translating them into developer-facing tasks and acceptance criteria • Experience using version control systems and branching strategies in team environments • Experience with multiple Linux distributions with a focus on Red Hat Enterprise Linux and Ubuntu • Must have an active U.S. Government Top Secret security clearance at time of application, current and within scope. Preferred Qualifications: • Experience overseeing software integrity and supply chain security (dependency management, SBOMs, vendor assessment) • Familiarity with NIST SP 800-53 Risk Management Framework (RMF) and DISA Application Security and Development STIG to assess the design of information systems • Hands-on experience with one or more SAST tools (e.g., SonarQube, Fortify) • Hands-on experience with one or more SCA tools (e.g., Sonatype Nexus) • Certifications such as Security+, CISSP, or CSSLP • Familiarity with container security and orchestration hardening (Docker, Kubernetes) and image scanning tools • Practical knowledge of vulnerability lifecycle management and patching processes across environments • Understanding of data protection requirements and handling of sensitive data (PII, classified, export-controlled) • Experience supporting or obtaining low-to-high (CDS) transfer approvals and familiarity with compliance workflows Primary Level Salary Range: $103,600.00 - $155,400.00 The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate's experience, education, skills and current market conditions. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business. The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. Northrop Grumman is an Equal Opportunity Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. For our complete EEO and pay transparency statement, please visit northropgrumman.com. U.S. Citizenship is required for all positions with a government clearance and certain other restricted positions.

Requirements

Must-haves

RELOCATION ASSISTANCE: Relocation assistance may be available
CLEARANCE REQUIRED FOR START: Yes
CLEARANCE TYPE: Secret
TRAVEL: Yes, 10% of the Time Description
Programming languages: Java, Python, JavaScript, C, C++
Spring Framework
Experience debugging existing software and correcting defects
Familiarity with Agile development methodologies and working in cross-functional scrum teams
Ability to analyze static and dynamic scan results, distinguish actionable security findings from false positives/non-applicable items, and draft technical justifications and remediation plans (POA&M)
Practical experience with secure coding practices and code review to identify common vulnerabilities
Knowledge of CI/CD pipelines and how security gates integrate into build/release processes
Comfortable reading and interpreting security requirements and translating them into developer-facing tasks and acceptance criteria
Experience using version control systems and branching strategies in team environments
Experience with multiple Linux distributions with a focus on Red Hat Enterprise Linux and Ubuntu

Nice-to-haves

Experience overseeing software integrity and supply chain security (dependency management, SBOMs, vendor assessment)
Familiarity with NIST SP 800-53 Risk Management Framework (RMF) and DISA Application Security and Development STIG to assess the design of information systems
Hands-on experience with one or more SAST tools (e.g., SonarQube, Fortify)
Hands-on experience with one or more SCA tools (e.g., Sonatype Nexus)
Certifications such as Security+, CISSP, or CSSLP
Familiarity with container security and orchestration hardening (Docker, Kubernetes) and image scanning tools
Practical knowledge of vulnerability lifecycle management and patching processes across environments
Understanding of data protection requirements and handling of sensitive data (PII, classified, export-controlled)
Experience supporting or obtaining low-to-high (CDS) transfer approvals and familiarity with compliance workflows
The application period for the job is estimated to be 20 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

javapythonjavascriptagilescrumci/cddockerkubernetes

Platform: eightfold
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance

Pto

Paid Time Off