Senior Penetration Tester

## Overview Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward. In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations. **Tharros. See Everything. Secure Anything.** *Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.* ## Description Tharros is seeking a **Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer** to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region. This role will support advanced penetration testing, software assurance, vulnerability assessment, cyber supply chain risk management, secure cloud and hybrid engineering, and cross-domain security assessment activities. The ideal candidate is a senior technical assessor who can go beyond automated scanning to identify systemic weaknesses, validate exploitability, assess operational impact, and provide clear remediation recommendations for complex mission environments. Responsibilities: - Conduct penetration testing, vulnerability assessments, software assurance, and cyber supply chain risk management activities for Federal mission systems. - Perform full-scope security testing using established methodologies such as MITRE ATT&CK, OWASP, NIST 800-115, and related Federal or IC assessment practices. - Support pre-engagement planning, rules of engagement, intelligence gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting. - Use approved automated and manual testing methods to identify vulnerabilities, validate exploitability, and assess potential business and operational impacts. - Identify vulnerabilities commonly missed by automated tools through manual, expert-driven testing techniques. - Assess SOC detection and response capabilities through controlled testing activities. - Produce penetration testing reports, vulnerability assessment reports, software assurance recommendations, and corrective action guidance. - Support software assurance through vulnerability and compliance testing, source code review, static/dynamic analysis, dependency review, and software supply chain risk identification. - Conduct vulnerability assessments and interpret results to recommend corrective actions and mitigation strategies. - Support secure cloud, hybrid, DevSecOps, application, identity, API, microservices, CI/CD, Zero Trust, and cross-domain assessment activities. - Maintain secure testing kits and assessment tooling, including patching, configuration updates, and approved tool management. - Update and maintain penetration testing, SCRM, and vulnerability assessment procedures. - Support audits, working groups, and stakeholder briefings related to penetration testing, software assurance, vulnerability assessment, and cyber supply chain risk. - Identify opportunities to improve testing processes, automate assessment workflows, strengthen reporting, and pr…