This role pays less than
90%
of similar roles. Most pay
$154,025–$209,212
— the shaded band above.
At the midpoint, this role pays about
$130k
versus about
$182k
for comparable roles.
Based on 240 similar postings.
Employer
About Northrop Grumman
Northrop Grumman is a leading global aerospace and defense technology company providing systems in autonomous systems, cyber, C4ISR, space, strike, and logistics. Industry: Aerospace & Defense
Northrop Grumman currently has
367 open roles
on FindRole.
Listed pay typically runs
$114,900–$176,300
across 353 roles with salary data.
The Principal/Sr Principal Penetration Tester joins the Northrop Grumman Mission Systems team as a Cyber Protection Engineer to conduct penetration testing and cybersecurity assessments. This role involves evaluating system security architecture, identifying vulnerabilities, and mapping attack paths across cloud-native and hybrid environments. The engineer will perform offensive security operations targeting CI/CD pipelines, containerized workloads, and enterprise services within AWS and Azure platforms. Key responsibilities include developing attack methodologies, validating security controls, and providing remediation guidance. Required technical skills include proficiency in Python, Bash, or PowerShell scripting; experience with Docker, Kubernetes, and VMware; and knowledge of Windows and Linux systems. The role addresses the critical challenge of securing cloud infrastructure and enterprise services while ensuring compliance with cybersecurity frameworks like RMF and STIGs to protect complex system security layouts from evolving threat vectors.
Identify vulnerabilities, attack paths, and potential threat vectors within AWS and Azure platforms.
Develop attack methodologies, testing procedures, and technical analysis for security evaluations.
Evaluate cloud security posture and validate existing security controls.
Provide technical reporting, operational recommendations, and remediation guidance to stakeholders.
Use scripting and automation languages like Python or Bash to support testing workflows.
What we're looking for
US Citizenship is required.
Active US Government Top Secret Security Clearance is required with the ability to obtain an SCI.
Must possess a DoD 8570 Certification for IAT Level II or higher (Sec+, CCNA, CySA+, or CND).
For Principal level: Bachelor's degree and 5 years of experience, Master's and 3 years, or 9 years of experience without a degree.
For Sr. Principal level: Bachelor's degree and 8 years of experience, Master's and 6 years, or 12 years of experience without a degree.
Experience conducting penetration testing, vulnerability analysis, or security assessments against cloud, enterprise, or hybrid environments.
Proficiency with cloud platforms (AWS/Azure), CI/CD pipelines, containerization (Docker/Kubernetes), and scripting languages like Python, Bash, or PowerShell.
Knowledge of Windows/Linux systems, networking fundamentals, offensive security methodologies, and cybersecurity compliance frameworks.
Embedded Firmware
C++
Python
Embedded Linux
Scripting
TCP/IP
Signal Generators
Spectrum Analyzers
Logic Analyzers
Digital Communication
System Integration
Hardware Testing
Field Testing
Debugging
Troubleshooting