This role pays less than
82%
of similar roles. Most pay
$138,780–$203,777
— the shaded band above.
At the midpoint, this role pays about
$130k
versus about
$171k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
367 open roles
on FindRole.
Listed pay typically runs
$114,900–$176,300
across 353 roles with salary data.
The Principal/Sr. Principal Cyber Protection Engineer (AHT) joins the DAF CLOUDworks team at the Air Force Research Laboratory to conduct penetration testing, vulnerability analysis, and security assessments across cloud, enterprise, and hybrid environments. This role involves hardening cloud platforms like AWS and Azure across IAM, networking, storage, logging, and security services while securing CI/CD pipeline workflows. The engineer will evaluate containerization and virtualization technologies including Docker, Kubernetes, and VMware from a security perspective. Key technical requirements include proficiency in scripting languages such as Python, Bash, or PowerShell to automate testing and analysis. Candidates must possess expertise in offensive security methodologies, vulnerability management, and common attacker TTPs. This position focuses on securing and enhancing cloud offerings to meet mission requirements within the DAF CLOUDworks program, ensuring robust infrastructure for critical air force operations.
Conduct penetration testing, vulnerability analysis, and security assessments across cloud, enterprise, and hybrid environments.
Evaluate and harden cloud platforms including AWS and Azure across IAM, networking, storage, and logging services.
Secure build, test, and deployment workflows within CI/CD pipeline technologies.
Assess containerization and virtualization technologies such as Docker, Kubernetes, and VMware from a security perspective.
Use scripting and automation in Python, Bash, or PowerShell to support testing and operational workflows.
Contribute to the development of secure cloud offerings to meet new mission requirements and improve functionality.
Analyze technical findings to produce assessment reports and communicate results to both technical and non-technical stakeholders.
What we're looking for
Active Top Secret clearance with SCI eligibility.
Ability to obtain IAT Level II or IAT Level III certification within 60 days of start date.
Bachelor’s degree in a Science discipline with 5+ years of software development experience, or a master’s degree with 3+ years of related experience.
Experience conducting penetration testing, vulnerability analysis, or security assessments against cloud, enterprise, or hybrid environments.
Experience with cloud platforms (AWS, Azure) and familiarity with CI/CD pipeline technologies, containerization (Docker, Kubernetes), and virtualization (VMware).
Proficiency in scripting/automation languages such as Python, Bash, or PowerShell and knowledge of Windows/Linux operating systems.
Familiarity with offensive security methodologies, vulnerability management processes, and common attacker TTPs.
Relevant cybersecurity certifications such as PenTest+, CySA+, CEH, or OSCP (preferred); experience with IaC tools or RMF frameworks (preferred).