Principal/Sr Principal Cyber Penetration Tester

Northrop Grumman•San Antonio, TX

3d•$103,600 - $155,400•Onsite

About The Position

Northrop Grumman Mission Systems (NGMS) is seeking a Principal/Sr. Principal Cyber Penetration Tester to join their team of qualified, diverse individuals conducting cybersecurity test activities in San Antonio, TX. In this role, the Principal/Sr. Principal Cyber Penetration Tester (Cyber Protection) assesses and tests system cybersecurity requirements, system security architecture, and system security layout. The candidate will operate in a team environment and collaborate across the organization (as required) to accomplish team goals by coordinating with customers and other testing organizations. Duties will include but are not limited to planning, executing, and reporting cyber test activities to develop artifacts in support of authorization packages. The Principal/Sr. Principal Cyber Penetration Tester will perform cyber-attack path analysis of system architectures and is responsible for the security governance, risk management, and compliance of a system while it is under test for the customer. Periodic travel to operational or development sites is anticipated to perform & support cyber test activities.

Requirements

Bachelor's Degree in Cybersecurity, Computer Science/Engineering, Software Development/Engineering, or related STEM degree field and 5 years of related experience (Principal) or 8 years of related experience (Sr. Principal); or a Master's degree and 3 years of related experience (Principal) or 6 years of related experience (Sr. Principal).
US Citizenship is required
Active Department of Defense (DoD) Top Secret Security Clearance is required to be considered with the ability to obtain SCI and SAP access
Must possess a DoD 8570 Certification for IAT Level II or higher or acquire it within 6 months of hire.
Experience with penetration testing

Nice To Haves

Contribute to the preparation of technical reports and briefings
Prior experience as an Offensive Cyber Operator (Red Team, CNO, CNE, or OCO) preferred (i.e. graduate of Computer Network Operations Qualification Course (CNOQC), Remote Interactive Operators Training (RIOT) and Future Operator Readiness, Growth & Enrichment Course (FORGE)).
Prior hand-on cyber test experience in a DoD Cyber Developmental Test or Operational Test (DT/OT) organization i.e. (i.e., 96th Cyber Test Group, 346th Test Squadron).
Possess a Cybersecurity certification related to Red Teaming/Penetration Testing: GPEN, GXPN or OSCP.
DoD Acquisition Professional Development Program (APDP) "Test & Evaluation" Certification, Level 1 or higher.

Responsibilities

Perform cyber testing, verification, and validation
Validate system security requirements definition and analysis, establish system security designs, implement security designs in hardware, software, data, and procedures
Participate in team reviews of technical requirements, designs and implementation plans prior to deployment of systems, digital communications systems, network protocols, computer architectures, and computer security penetration tools and techniques
Provide cyber security implementation guidance to technical design teams and develop test use cases to meet requirements and architecture model content.
Support development of technical decision-making guidance to the Cybersecurity team to ensure timely, high quality product deliveries supporting flight test events geared to meet mission requirements
Ensure weapon system compliance with all contractually obligated cybersecurity standards and guidance, including but not limited to CNSSI 1253, DoD 8140, DoD 8510, and AFI 17-101
Ensure weapon system assessments are completed to meet all contractually obligated cybersecurity standards and guidance, including but not limited to RMF and cyber survivability requirements
Provide input to program milestones and metrics, adhering to cybersecurity-relevant plans and schedules
Solve complex problems across disciplines in an Agile environment