At Northrop Grumman, our employees have incredible opportunities to work on revolutionary systems that impact people's lives around the world today, and for generations to come. Our pioneering and inventive spirit has enabled us to be at the forefront of many technological advancements in our nation's history - from the first flight across the Atlantic Ocean, to stealth bombers, to landing on the moon. We look for people who have bold new ideas, courage and a pioneering spirit to join forces to invent the future, and have fun along the way. Our culture thrives on intellectual curiosity, cognitive diversity and bringing your whole self to work — and we have an insatiable drive to do what others think is impossible. Our employees are not only part of history, they're making history.

Northrop Grumman Mission Systems (NGMS) is seeking a **Principal Cyber Software Engineer **to join our team of qualified, diverse individuals conducting cybersecurity software engineering activities in San Antonio, TX.

In this role, the Principal Cyber Software Engineer assesses and tests system cybersecurity requirements, system security architecture, and system security layout. The candidate will operate in a team environment and collaborate across the organization (as required) to accomplish team goals by coordinating with customers and other testing organizations.

Duties will include but are not limited to planning, executing, and reporting cyber test activities to develop artifacts in support of authorization packages. The Principal Cyber Software Engineer will perform cyber-attack path analysis of system architectures and develop scripts to automate processes to support this analysis. Periodic travel to operational or development sites is anticipated to perform & support cyber test activities.

Responsibilities include:

• Perform cyber testing, verification, and validation

• Validate system security requirements definition and analysis, establish system security designs, implement security designs in hardware, software, data, and procedures

• Develop software test scripts to support cyber test activities

• Participate in team reviews of technical requirements, designs and implementation plans prior to deployment of systems, digital communications systems, network protocols, computer architectures, and computer security penetration tools and techniques

• Provide cyber security implementation guidance to technical design teams and develop testing use cases to meet requirements and architecture model content.

• Ensure weapon system compliance with all contractually obligated cybersecurity standards and guidance, including but not limited to CNSSI 1253, DoD 8140, DoD 8510, and AFI 17-101

• Ensure weapon system assessments are completed to meet all contractually obligated cybersecurity standards and guidance, including but not limited to RMF and cyber survivability requirements

• Solve complex problems across disciplines in an Agile environment

Basic Qualifications:

• Bachelor's Degree and 5 years of related experience; or a Master's degree and 3 years of related experience. Note:9 years of related experience may be considered in lieu of degree.

• US Citizenship is required

• Active Department of Defense (DoD) Top Secret Security Clearance is required to be considered with the ability to obtain SCI and SAP access

• Must possess a DoD 8570 Certification for IAT Level II or higher or ability to obtain the certification within six months of hire.

• Experience with reverse engineering

• Strong Python programming language experience and experience with other programing languages

• Experience in software development to include any of the following: kernel mode, embedded, command and control, web applications, network applications

Preferred Qualifications:

• Prior experience as an Offensive Cyber Operator (Red Team, CNO, CNE, or OCO) preferred (i.e. graduate of Computer Network Operations Qualification Course (CNOQC), Remote Interactive Operators Training (RIOT) and Future Operator Readiness, Growth & Enrichment Course (FORGE)).

• Possess a Cybersecurity certification related to Red Teaming/Penetration Testing: GPEN, GXPN or OSCP.

• Development of lower-level networking protocols such as IP, TCP, and UDP

• Ability to understand secure / insecure programming concepts (format string vulnerabilities, heap overflows, etc.)

• Familiarity with common source control tools (git, Mercurial, etc.) and automated build system workflows (Jenkins, Go, etc.)