Description

Northrop Grumman Mission Systems (NGMS) is seeking a Cyber Protection Engineer to join our team of qualified, diverse individuals conducting penetration and cybersecurity testing activities in San Antonio, TX.

In this role, the Cyber Protection Engineer assesses and tests system cybersecurity requirements, system security architecture, and system security layout. The candidate will operate in a team environment and collaborate across the organization (as required) to accomplish team goals by coordinating with customers and other testing organizations.

Essential duties:

• Conduct cloud-focused penetration testing and security assessment activities to identify vulnerabilities, attack paths, and potential threat vectors across cloud-native and hybrid environments.
• Support offensive security operations targeting cloud infrastructure, CI/CD pipelines, containerized workloads, applications, and enterprise services within AWS, Azure, and related platforms.
• Assists with development of attack methodologies, testing procedures, and technical analysis while collaborating with senior operators and engineers.
• Apply cybersecurity knowledge to evaluate cloud security posture, validate security controls, and contribute to technical reporting, operational recommendations, and remediation guidance.

Basic Qualifications:

• Bachelor's Degree and 2 years of related experience; or a Master's degree and 0 years of related experience. Note: 6 years of related experience may be considered in lieu of degree.
• US Citizenship is required
• Active US Government Top Secret Security Clearance is required with the ability to obtain an SCI.
• Must possess or have ability to obtain a DoD 8570 Certification for IAT Level II or higher(Sec , CCNA, CySA or CND) prior to start.
• Experience conducting penetration testing, vulnerability analysis, or security assessments.
• Experience or familiarity with containerization and virtualization technologies such as Docker, Kubernetes, or VMware.
• Knowledge of Windows and Linux operating systems, networking fundamentals, and common enterprise architecture.
• Experience using scripting or automation languages such as Python, Bash, or PowerShell to support testing, analysis, or operational workflows.
• Familiarity with offensive security methodologies, vulnerability management processes, and common attacker TTPs.

Preferred Qualifications for both:

• Experience with cloud platforms such as AWS and Azure, including familiarity with IAM, networking, storage, logging, and security services.
• Familiarity with CI/CD pipeline technologies and concepts, including GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps, or similar platforms.
• Ability to analyze technical findings and contribute to assessment reports, presentations, and client deliverables, and communicate findings to both technical and non-technical stakeholders.
• Experience assessing cloud-native technologies, including Kubernetes, containers, serverless functions, or Infrastructure-as-Code deployments.
• Familiarity with cloud security assessment tools, vulnerability scanners, and offensive security frameworks.
• Familiarity with Terraform, Ansible, ARM templates, CloudFormation, or Infrastructure-as-Code concepts.
• Experience with logging, monitoring, and detection technologies such as Splunk, Sentinel, ELK, Defender, or CrowdStrike.
• Familiarity with RMF, A&A activities, STIGs, SCAP, ACAS, or cybersecurity compliance frameworks.
• Ability to rapidly learn emerging technologies, cloud attack methodologies, and evolving threat landscapes.
• Relevant certifications such as AWS Security Specialty, Azure Security Engineer Associate, PenTest , CySA , CEH, AZ-500, SC-200, CRTO, GPEN, GXPN, OSCP, or similar cybersecurity certifications preferred.