> Markdown version of [/jobs/ext/3538195-sentinel-systems-principal-systems-engineer-scrm-vulnerabilit](https://www.wearedevelopers.com/jobs/ext/3538195-sentinel-systems-principal-systems-engineer-scrm-vulnerabilit). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sentinel - Systems/Principal Systems Engineer (SCRM Vulnerabilit

- **Company:** Northrop Grumman
- **Location:** Roy, UT, United States
- **Salary:** $79,300.0 - $118,900.0
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Systems Engineering, CompTIA Security+, Computer Engineering, System Configuration, Digital Forensics, Kali Linux, Comptia Pentest+ CE, Reverse Engineering, SAP (Applications), Software Engineering, SC Clearance, Information Technology, Metasploit, Nessus, Vulnerability Analysis
- **Published:** October 2, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9213379/sentinel-systemsprincipal-systems-engineer-scrm-vulnerabilit

## About the Role

This requisition may be filled at either the Systems Engineer level (T-02) or Principal Systems Engineer level (T-03).

Required for Both Levels:

 * Must be a US Citizen with an active U.S. Government Secret Clearance, at time of application, current and within scope, with an investigation date within the last 6 years
 * Must have a current or ability to obtain and maintain a Special Access Program (SAP) approval within a reasonable period of time, as determined by the company to meet its business need, * BS in one of the following or equivalent disciplines: Software Engineering, Computer Science, Digital Forensics, Computer Engineering, or Electrical Engineering with 2 years of related experience, or a Master's degree in the above disciplines with 0 years of related experience
 * Ability to obtain CompTIA Security+ certification within 6 months of starting in the position.
 * Familiarity of developing, documenting, and executing formal test plans and procedures, with a specific focus on vulnerability/penetration testing and counterfeit part assurance., * BS in one of the following or equivalent disciplines: Software Engineering, Computer Science, Digital Forensics, Computer Engineering, or Electrical Engineering with 5 years or a Master's degree in the above disciplines with 3 years of related experience, or 1 year with a PhD.
 * Ability to obtain CompTIA Security+ certification within 6 months of starting in the position.
 * Familiarity of developing, documenting, and executing formal test plans and procedures, with a specific focus on vulnerability/penetration testing and counterfeit part assurance., * Top Secret Security Clearance
 * Any of the following certifications: OSCP, GREM, PenTest+ or comparable industry-recognized certifications
 * Experience utilizing penetration testing and vulnerability assessment tools (Kali Linux / Metasploit / NESSUS / ACAS / OpenVAS / Etc.)
 * Experience validating software configurations (STIG / OpenSCAP)
 * Experience with software forensics activities / processes
 * Experience with SCRM chain of custody processes / procedures
 * Experience in software or hardware reverse engineering and exploratory reconnaissance

## Description

Northrop Grumman Defense Systems is seeking a Systems Engineer (SCRM Vulnerability Assessment). This position is located in Roy, Utah and supports the Sentinel program.

What You'll Get to Do:
In this role, you will be responsible for researching, testing, and documenting the cybersecurity posture of commercial off-the-shelf hardware and software products.

Responsibilities include, but are not limited to:

 * Perform vulnerability assessments against COTs hardware / software
 * Review, Interpret, and Communicate vulnerability assessment results
 * Participate in a variety of working groups, customer meetings
 * Contributes to the ongoing enhancement of assessment capabilities through the development and implementation of improved methodology, processes, infrastructure, tools, and deliverables