Cyber Software Test Engineer

Northrop Grumman•Cincinnati, OH

1d•$91,800 - $170,900•Onsite

About The Position

Northrop Grumman – Xetron, part of the Mission Systems sector, is seeking cleared Cyber Software Test Engineers and Principal Cyber Software Test Engineers to test developed solutions addressing national security threats. Products may involve kernel development, reverse engineering, or vulnerability research of network and communication systems. The role requires software development and testing skills, including familiarity with scripting languages. The position is full-time onsite in Cincinnati, Ohio, and requires U.S. citizenship and an active Secret clearance or higher, with the ability to obtain and maintain a Top Secret clearance. Travel is 10% of the time, and relocation assistance may be available. The role may include reviewing system requirements, manually and automatically testing software against those requirements, writing test procedures and automated scripts, and conducting verification and validation testing with guidance. The job can be filled at Engineer Level 2 or Principal Engineer Level 3. Salary ranges are $91,800–$137,600 for the primary level and $113,900–$170,900 for the secondary level. Depending on the position, employees may also be eligible for overtime, shift differential, and a discretionary bonus. Benefits include health insurance, life and disability insurance, a savings plan, company-paid holidays, and paid time off.

Requirements

For Engineer Level 2: Bachelor's degree in Computer Science or Computer Engineering with 2 years of relevant work experience, or a Master's degree in either field with no relevant experience.
For Principal Engineer Level 3: Bachelor's degree in Computer Science or Computer Engineering with 5 years of relevant work experience; a Master's degree in either field with 3 years; or a Ph.D. in either field with 1 year.
Programming and automation experience in Python.
Experience with debugging and/or system analysis tools, such as Wireshark, IDAPro, OllyDebug, WinDBG, or JTAG debuggers.
Willingness to work full-time onsite in Cincinnati, Ohio.
U.S. citizenship.
Active Secret clearance or higher and ability to obtain and maintain a Top Secret clearance.

Nice To Haves

Active TS/SCI clearance with polygraph.
Experience as a technical lead leading teams of 2–8 engineers.
Advanced degree in Computer Science, Computer Engineering, or a related field.
Software development experience in kernel mode, embedded systems, command and control, web applications, or network applications.
Experience with the software development life cycle (SDLC).
Familiarity with assembly languages such as x86, x64, MIPS, PPC, or ARM.
Experience with vulnerability research on operating systems such as Android, iOS, Windows, or Linux.
Experience with emulation tools such as Renode or QEMU.
Experience reverse engineering compiled binaries with industry-standard tools such as Ghidra or IDA Pro.
Operating system internals experience.
Experience developing lower-level networking protocols such as TCP/IP and UDP.
Understanding of return-oriented programming (ROP) concepts and execution.
Ability to understand secure and insecure programming concepts, including format string vulnerabilities and heap overflows.
Familiarity with modern source control platforms such as Git, GitHub, or GitLab and CI/CD workflows using tools such as Jenkins, GitHub Actions, or GitLab CI.
Experience with the Agile methodology.
Knowledge of computer networking, modern software development environments, embedded programming, automated software testing tools, and software configuration management tools.

Responsibilities

Test developed solutions addressing national security threats, potentially involving kernel development, reverse engineering, or vulnerability research of network and communication systems.
Review system requirements as needed.
Test software manually and with automated scripts to ensure it meets system requirements.
Write software test procedures and automated scripts as needed.
Conduct verification and validation testing with guidance.