Exploit Developer/Penetration Tester 2/3

Flexible work arrangements, phenomenal learning opportunities, and a friendly team environment define the culture at Northrop Grumman. You’ll benefit from exceptional benefits and healthcare, a 9/80 work schedule, and a 401k matching program, with a hybrid role that supports collaboration across teams and exposure to a wide range of projects and customers.

Hybrid Exploit Developer/Penetration Tester level 2/3 focused on reverse engineering, exploit development, and adversarial cyber testing within the Cyber Assessment Tiger Team, with travel up to 25% per year.

Responsibilities

• Perform code analysis and hardware and binary reverse engineering to understand functionality and identify vulnerabilities in hardware and software, including avionics and embedded systems.
• Assess security configurations to determine effectiveness and potential exploitation opportunities.
• Design and execute full adversarial cyber testing scenarios against components, applications, operating systems, or end-to-end integrated systems.
• Contribute to the design, development, deployment, and integration of offensive cyber operations tools across platforms, payloads, and systems.
• Contribute to shaping system cyber survivability attributes through design, development, implementation, and integration.
• Assist in preparing and delivering technical reports and briefings.
• Continuously develop personal knowledge and advance the capabilities of the broader team.

Requirements

• Level 2 requires a High School Diploma or GED and 6 years of experience in Cyber Security, Red Team, Penetration Testing, or Exploit Development.
• Level 3 requires a High School Diploma or GED and 9 years of experience in Cyber Security, Red Team, Penetration Testing, or Exploit Development.
• Experience in software development to support penetration testing, including vulnerability development, reverse engineering tool modules, covert tunneling, scanning scripts, and passive collection.
• Two years of experience in at least three of the following languages: C, C++, C#, Python, Ruby, Rust, Bourne/Bash, PowerShell, Visual Basic, Go, PHP, Javascript, HTML.
• Willingness to travel domestically and internationally up to 25% per year.
• Ability to obtain and maintain a DoD Top Secret security clearance as a condition of continued employment; additional clearances may be required for certain government programs.

Technologies

• C, C++, C#, Python, Ruby, Rust, Bourne/Bash, PowerShell, Visual Basic, Go, PHP, Javascript, HTML
• Linux, Unix, Windows
• OSCP, OSCE, OSEE, GPEN, GXPN
• Integrity (RTOS), Nucleus (RTOS), VxWorks (RTOS)
• PowerPC, ARM, Xilinx FPGA, RISCx
• Assembly language
• ARINC 429, MIL-STD-1553, Spacewire
• Cryptanalysis