Principal/Senior Principal Penetration Tester

Northrop Grumman

Confirmed live today High trust

Quick summary

Work type
On-site
Location
San Antonio, TX
Employment
Full-time
Posted
98 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $179k
$125k $232k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $147,200–$210,125.

Based on 240 similar postings.

Employer

About Northrop Grumman

Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense

Northrop Grumman currently has 629 open roles on FindRole.

Listed pay typically runs $117,500–$176,300 across 314 roles with salary data.

Most-posted roles

View all roles at Northrop Grumman

At a glance

TL;DR · Principal/Senior Principal Penetration Tester

The Principal/Sr Principal Penetration Tester joins the Northrop Grumman Mission Systems team to conduct penetration and cybersecurity testing activities. This role involves assessing system security architecture, requirements, and layouts within a team environment. The engineer will perform cloud-focused penetration testing to identify vulnerabilities and attack paths across cloud-native and hybrid environments. Key responsibilities include supporting offensive security operations for CI/CD pipelines, containerized workloads, and enterprise services. The candidate will utilize AWS, Azure, Docker, Kubernetes, and VMware while employing scripting languages like Python, Bash, or PowerShell. Core tasks involve developing attack methodologies, validating security controls, and providing remediation guidance. The work focuses on evaluating cloud security postures and identifying threat vectors across complex enterprise architectures and various networking fundamentals.

What you'll do

  • Conduct cloud-focused penetration testing to identify vulnerabilities and threat vectors in hybrid environments.
  • Perform offensive security operations targeting CI/CD pipelines, containerized workloads, and enterprise services.
  • Develop attack methodologies and testing procedures in coordination with senior engineers.
  • Evaluate cloud security postures and validate existing security controls.
  • Provide technical reporting, operational recommendations, and remediation guidance to stakeholders.
  • Assess system cybersecurity requirements, security architecture, and system security layouts.

What we're looking for

  • US Citizenship is required.
  • Active US Government Top Secret Security Clearance is required with the ability to obtain an SCI.
  • Must possess a DoD 8570 Certification for IAT Level II or higher (Sec+, CCNA, CySA+, or CND).
  • Bachelor's Degree and 5 years of related experience; or a Master's degree and 3 years of related experience; or 9 years of experience (Principal level).
  • Bachelor's Degree and 8 years of related experience; or a Master's degree and 6 years of related experience; or 12 years of experience (Sr. Principal level).
  • Experience conducting penetration testing, vulnerability analysis, or security assessments against cloud, enterprise, or hybrid environments.
  • Experience with cloud platforms such as AWS and Azure, including IAM, networking, storage, logging, and security services.
  • Familiarity with CI/CD pipeline technologies, containerization (Docker, Kubernetes), and scripting languages like Python, Bash, or PowerShell.

More like this

Similar roles

Penetration Tester

Northrop Grumman

San Antonio, TX 47 days ago
Penetration Testing AWS Azure Kubernetes Docker Python Bash PowerShell CI/CD Terraform Ansible Splunk Sentinel ELK CrowdStrike VMware GitHub Actions GitLab CI/CD Jenkins Azure DevOps RMF STIGs SCAP ACAS
2+ yrs exp

Cyber Protection Engineer

Northrop Grumman

Rome, NY 54 days ago
AWS Azure Kubernetes Docker Python Bash PowerShell Terraform Ansible CI/CD GitHub Actions GitLab CI/CD Jenkins Azure DevOps VMware Splunk Sentinel ELK CrowdStrike Linux Windows Penetration Testing Vulnerability Analysis Infrastructure‑as‑Code RMF STIGs SCAP ACAS
2+ yrs exp

Principal/Senior Principal Cyber Protection Engineer

Northrop Grumman

Rome, NY 49 days ago
AWS Azure Kubernetes Docker Python Bash PowerShell Terraform Ansible CI/CD GitHub Actions GitLab CI/CD Jenkins Azure DevOps VMware Splunk Sentinel ELK CrowdStrike Linux Windows RMF STIGs SCAP ACAS Penetration Testing Vulnerability Analysis
8+ yrs exp

Principal Penetration Tester

Microsoft

Redmond, WA 11 days ago $142,800–$274,800
Penetration Testing Offensive Security Adversary Emulation Python C# Go C++ PowerShell .NET Rust Azure AWS GCP KQL Power BI Azure DevOps OWASP MITRE ATT&CK NIST RAG OT ICS
6+ yrs exp Hybrid

Senior Penetration Tester

CoStar Group

Arlington, VA 120 days ago $115,000–$203,000
Penetration Testing API Penetration Testing Active Directory AWS Kubernetes CI/CD Python PowerShell C# Java JavaScript Go Burp Suite OWASP ZAP Nmap Bloodhound Metasploit Cobalt Strike Sliver Mythic MITRE ATT&CK Mobile Application Penetration Testing Secure Code Review Prompt Injection LLM Security
6+ yrs exp Hybrid

Penetration Tester

Leidos

Huntsville, AL 56 days ago $87,100–$157,450
Penetration Testing Python Bash PowerShell AWS Azure GCP Metasploit Burp Suite Nmap OWASP Top 10 TCP/IP API Security REST SOAP GraphQL Vulnerability Assessment Cobalt Strike ScoutSuite Prowler Pacu
4+ yrs exp