Penetration Tester

## Overview Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward. In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations. **Tharros. See Everything. Secure Anything.** *Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.* ## Description Are you a problem solver? Do you like complex, challenging puzzles? This position involves a blending of several disciplines to include, but not limited, penetration testing, reverse engineering, and code/script development. In this role, you will apply your talents to reverse engineer executables to identify flaws and create and operationally test exploits to take advantage of an identified vulnerability or zero days. The Air Combat Command's 67th Cyberspace Wing (67 CW), 346th Cyber Test and Evaluation Squadron (346 CTES), executes, and contributes as both an operational and participating test organization in a full array of operational tests of various cyber weapons in coordination with the 318 Range Squadron (318RANS) who provides instrumented cyber range services, through both physical hardware and virtual systems. In support of this mission, **Tharros** is seeking a **Penetration Tester** (PT) to conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise, or local policy; assess risk levels; and recommend/develop appropriate mitigation countermeasures in operational and nonoperational situations. The PT also performs assessments of systems and networks within the network environment or enclave and identifies where they deviate from acceptable configurations, enclave policy, or local policy and measures effectiveness of defense-in-depth architecture against known vulnerabilities. **Responsibilities include:** - Analyze organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives - Analyze software applications to gain an understanding of the system, mission and or application vulnerabilities and exploits - Develop exploits for exposed vulnerabilities with a focus on non-interference of mission partner systems and networks - Conduct and/or support authorized penetration testing on enterprise network assets - Maintain deployable cyber defense audit toolkit (e.g., specialized cyber defense software and hardware) to support cyber defense audit missions - Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing - Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions - Conduct required reviews as appropriate within environment (e.g., Technical Surveillance, Countermeasure Reviews [TSCM], TEMPEST countermeasure reviews) - Perform technical (evaluation of technology) and nontechnical (evaluation of people and opera…