Jobs / United States / Northrop Grumman Systems Corporation
Cyber Systems Engineer - level 5
Northrop Grumman Systems Corporation · 🇺🇸 United States-Colorado-Colorado Springs
Sponsorship verdict
Posting rules out sponsorship
The posting rules out sponsorship or requires citizenship/clearance.
- No government sponsor record hereThis employer posted directly and does not match a government sponsor register.
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- Security clearance mentionedFrom the posting’s own wording.
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Why not apply?
The posting mentions a security clearance — usually restricted to citizens of that country.
No register record and no sponsorship wording in the posting. Worth asking the employer before investing significant time.
SponsorApply flags time-wasters so your applications go where they can land. These come from the posting's own wording — read the original listing to confirm. See better-fit alternatives →
Sponsor Radar — Northrop Grumman Systems Corporation
This employer posted directly and does not match a government sponsor register.
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Northrop Grumman Systems Corporation →
About the role
RELOCATION ASSISTANCE: No relocation assistance available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Northrop Grumman’s Space Sector is seeking a Cyber Systems Engineer -Level 5 to join our team in Colorado Springs, CO . This position will be based at our Colorado Springs airport facility. In this position, you will: Architect, Deploy, and Maintain Elastic Stack • Lead the design, deployment, configuration, and lifecycle management of Elastic Stack components, including Elasticsearch , Logstash , Kibana , and Elastic Agent/Fleet/Defend in a primarily Linux-based environment. • Design and implement highly available , scalable , and secure Elastic Stack architectures across distributed and clustered environments. • Own version upgrades, patching, backup/restore strategies, and capacity planning for Elastic clusters. Automation and Infrastructure-as-Code • Develop automation for Elastic Stack deployments and configuration management using scripting and/or infrastructure-as-code tools (e.g., Bash, Python, PowerShell, Ansible, Terraform , or equivalent). • Create reusable playbooks/scripts for provisioning new environments, onboarding new data sources, and performing configuration changes at scale. • Implement CI/CD-oriented approaches for safely deploying Elastic configuration, ingest pipelines, and detection logic. Log Ingestion, Pipelines, and Best Practices • Define and enforce logging best practices for Linux, Windows, network, and security devices to ensure high-fidelity, actionable telemetry. • Design, implement, and optimize Logstash pipelines and/or Elasticsearch ingest pipelines to onboard logs from diverse sources, including: • • System logs (e.g., syslog) • Application logs • Network and security device logs • Metrics and SNMP traps from infrastructure and security tools • Normalize, enrich, and parse data (including use of regular expressions , grok, dissect, and ECS mapping) to support threat detection, hunting, and reporting use cases. Metrics, Telemetry, and SNMP-Trap Integration • Integrate system and application metrics and SNMP traps into Elastic via Logstash and/or ingest pipelines. • Develop and maintain pipelines to transform metrics and SNMP events into structured documents suitable for dashboards, alerting, and long-term analysis. • Tune ingestion and storage strategies for performance, cost-efficiency, and retention requirements. Dashboards, Analytics, and Detection Engineering • Develop and implement Complex Elastic queries to extract, analyze, and visualize security data from diverse sources. • Use Elastic search languages ( KQL, ES|QL, Lucene, JQL , etc.) to support threat hunting, incident analysis, and operational monitoring. • Build and maintain Kibana dashboards, visualizations, and reports tailored to SOC analysts, incident responders, engineering teams, leadership, and auditors. • Leverage Elastic Defend to create and tune secu