Principal/Sr Principal Cyber Penetration Tester

Northrop Grumman Mission Systems (NGMS) is seeking a Principal/Sr. Principal Cyber Penetration Tester to join our team of qualified, diverse individuals conducting cybersecurity test activities in San Antonio, TX .

In this role, the Principal/Sr. Principal Cyber Penetration Tester (Cyber Protection) assesses and tests system cybersecurity requirements, system security architecture, and system security layout. The candidate will operate in a team environment and collaborate across the organization (as required) to accomplish team goals by coordinating with customers and other testing organizations.

Duties will include but are not limited to planning, executing, and reporting cyber test activities to develop artifacts in support of authorization packages. The Principal/Sr. Principal Cyber Penetration Tester will perform cyber-attack path analysis of system architectures and is responsible for the security governance, risk management, and compliance of a system while it is under test for the customer. Periodic travel to operational or development sites is anticipated to perform & support cyber test activities.

Responsibilities include:

• Perform cyber testing, verification, and validation
• Validate system security requirements definition and analysis, establish system security designs, implement security designs in hardware, software, data, and procedures
• Participate in team reviews of technical requirements, designs and implementation plans prior to deployment of systems, digital communications systems, network protocols, computer architectures, and computer security penetration tools and techniques
• Provide cyber security implementation guidance to technical design teams and develop test use cases to meet requirements and architecture model content.
• Support development of technical decision-making guidance to the Cybersecurity team to ensure timely, high quality product deliveries supporting flight test events geared to meet mission requirements
• Ensure weapon system compliance with all contractually obligated cybersecurity standards and guidance, including but not limited to CNSSI 1253, DoD 8140, DoD 8510, and AFI 17-101
• Ensure weapon system assessments are completed to meet all contractually obligated cybersecurity standards and guidance, including but not limited to RMF and cyber survivability requirements
• Provide input to program milestones and metrics, adhering to cybersecurity-relevant plans and schedules
• Solve complex problems across disciplines in an Agile environment

• Bachelor’s Degree in Cybersecurity, Computer Science/Engineering, Software Development/Engineering, or related STEM degree field and 5 years of related experience; or a Master’s degree and 3 years of related experience.
• US Citizenship is required
• Active Department of Defense (DoD) Top Secret Security Clearance is required to be considered with the ability to obtain SCI and SAP access
• Must possess a DoD 8570 Certification for IAT Level II or higher or acquire it within 6 months of hire.
• Experience with penetration testing, * Bachelor’s Degree in Cybersecurity, Computer Science/Engineering, Software Development/Engineering, or related STEM degree field and 8 years of related experience; or a Master’s degree and 6 years of related experience.
• US Citizenship is required
• Active Department of Defense (DoD) Top Secret Security Clearance is required to be considered with the ability to obtain SCI and SAP access
• Must possess a DoD 8570 Certification for IAT Level II or higher or acquire it within 6 months of hire.
• Experience with penetration testing

Preferred Qualifications for both:

• Contribute to the preparation of technical reports and briefings
• Prior experience as an Offensive Cyber Operator (Red Team, CNO, CNE, or OCO) preferred (i.e. graduate of Computer Network Operations Qualification Course (CNOQC), Remote Interactive Operators Training (RIOT) and Future Operator Readiness, Growth & Enrichment Course (FORGE)).
• Prior hand-on cyber test experience in a DoD Cyber Developmental Test or Operational Test (DT/OT) organization i.e. (i.e., 96th Cyber Test Group, 346th Test Squadron).
• Possess a Cybersecurity certification related to Red Teaming/Penetration Testing: GPEN, GXPN or OSCP.
• DoD Acquisition Professional Development Program (APDP) “Test & Evaluation” Certification, Level 1 or higher.

Primary Level Salary Range: $103,600.00 - $155,400.00

The above salary range represents a general guideline; however, Northrop Grumman considers a number of factors when determining base salary offers such as the scope and responsibilities of the position and the candidate’s experience, education, skills and current market conditions.

Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Annual bonuses are designed to reward individual contributions as well as allow employees to share in company results. Employees in Vice President or Director positions may be eligible for Long Term Incentives. In addition, Northrop Grumman provides a variety of benefits including health insurance coverage, life and disability insurance, savings plan, Company paid holidays and paid time off (PTO) for vacation and/or personal business.

At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people’s lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation’s history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work - and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they’re making history.