Jobs / United States / Northrop Grumman Systems Corporation

Sr. Principal/ Principal Product Security Engineer

Northrop Grumman Systems Corporation · 🇺🇸 United States-Virginia-Dulles

Sponsorship verdict

Posting rules out sponsorship

The posting rules out sponsorship or requires citizenship/clearance.

  • No government sponsor record hereThis employer posted directly and does not match a government sponsor register.
  • The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
  • No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
  • Security clearance mentionedFrom the posting’s own wording.
  • Confirmed live todayWhen a source last listed this job as open.

US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).

A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.

Start free →

Or apply yourself on the official page →

Why not apply?

Requirement gap

The posting mentions a security clearance — usually restricted to citizens of that country.

Sponsorship unknown

No register record and no sponsorship wording in the posting. Worth asking the employer before investing significant time.

SponsorApply flags time-wasters so your applications go where they can land. These come from the posting's own wording — read the original listing to confirm. See better-fit alternatives →

Sponsor Radar — Northrop Grumman Systems Corporation

Employer-posted — not on a register

This employer posted directly and does not match a government sponsor register.

Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Northrop Grumman Systems Corporation →

About the role

RELOCATION ASSISTANCE: Relocation assistance may be available CLEARANCE REQUIRED FOR START: Yes CLEARANCE TYPE: Top Secret TRAVEL: Yes, 10% of the Time Description At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history. Product Security Engineer (TS/SCI) We are seeking a Product Security Engineer to join our Product Security Engineering team supporting the secure development and authorization of mission-critical spacecraft and flight software. In this role, you will help build and lead the product security of space vehicles (SVs), including their flight software; guidance, navigation, and control (GNC) software; simulation platforms; embedded systems; and the engineering platforms used to develop and deliver these products to the customer. You will work closely with software, systems, DevOps, and cybersecurity engineers to embed security throughout the product lifecycle, from architecture and design through implementation, test, release, and onboarding to a ground system. You will lead hands-on security engineering activities such as threat modeling, attack surface analysis, secure design and code reviews, vulnerability triage, and software supply-chain risk management. You will also help integrate and improve automated security capabilities in GitLab CI, Jenkins, or similar build and delivery pipelines, including SAST, software composition analysis, SBOM generation, secrets scanning, and other security analyses. This role is equally focused on building security into the engineering workflow and enabling the program's Risk Management Framework (RMF) authorization effort. You will develop and maintain key RMF artifacts, partner with technical teams to implement and document security controls and help drive the SV through obtaining an Authorization to Operate (ATO). The ideal candidate is a software engineer at heart who has developed deep security expertise: someone comfortable reading and discussing C/C++ code; writing useful automations using Python, Go, or a similar language; working directly with software engineers to resolve real risks; and improving tooling and processes rather than relying solely on manual activities. You will be expected to bring sound engineering judgement, take ownership of complex security problems, and make security practical, scalable, and effective for engineering teams. This position is 100% on-site in Dulles, Virginia and requires an active TS/SCI security clearance. Job Responsibilities • Collaborate with engineering, program, systems, and cybersecurity stakeholders to review and improve product-security processes across development, test, governance, and authorization activities. • Serve as a hands-on product security partner to embedded software, DevOps, and ground/supporting software teams throughout the software development lifecycle. • Advise software development teams on secure coding practices, secure architecture, embedded system security design, software supply-chain security, and CI/CD pipeline security. • Conduct security assessments of embedded and m

View the official posting →

Source: Employer career site (Workday) First seen: 2026-10-15 Last confirmed: 2026-10-15 How our data works → Report this job

Similar opportunities