Penetration Tester

Tharros; Norfolk (VA); On-site; USD 85,000 - 120,000; Full time

Job summary

Tharros is seeking a Penetration Tester to support the US Navy with cyber test plans, testing, and reporting. The role involves conducting tests on operational, lab, or cyber range environments across physical, virtualized, or cloud-based systems, under the supervision of the Cyber Operations Officer.

You will analyze architectures, perform vulnerability assessments, and execute offensive cyber operations to identify weaknesses and report findings within mission-driven timelines.

Qualifications

• Minimum 1 year of experience performing penetration testing, red teaming, or exploitation development.
• Certified Ethical Hacker (CEH), equivalent, or higher certification.
• Proficient in at least one offensive tool: Metasploit, Cobalt Strike, or Core Impact.
• Independently generate red team report documents under supervision.
• Proficient in Microsoft Office Suite to include Teams or similar tools.

Responsibilities

• Analyze target operational architecture for ways to gain access.
• Conduct network scouting and vulnerability analyses of systems within a network.
• Perform on-net and off-net activities to control and exfiltrate data from deployed technologies.
• Conduct open-source data collection via various online tools.
• Survey computer and digital networks and deploy tools to a target.
• Exploit network devices, security devices, and systems using various methods.
• Facilitate access enabling by physical and/or wireless means.
• Identify points of strength and vulnerability within a network.

Skills

CEH certification

Penetration testing

Red teaming

Cybersecurity reporting

Microsoft Office

Tools

Metasploit

Cobalt Strike

Core Impact

Job description

• Employee Type Regular Full-Time

Contact information

• Name Talent Acquistion
• Email [e-mail]

Description

Tharros has an immediate opportunity for a Penetration Tester to support the US Navy with operational test and evaluation support which include assisting in the development of cyber test plans, execute cyber tests, and report cyber test results. In this role you will conduct cyber tests on operational systems, in laboratory environments, or in cyber range environments. Testing may be against physical, virtualized, or cloud-based systems. This position shall leverage all authorized resources and analytic techniques to penetrate/access targeted networks and systems under test in support of OPTEVFOR’s cyber OT&E mission. Team member will perform these duties under the supervision of the Cyber Operations Officer.

• Analyze target operational architecture for ways to gain access.
• Conduct network scouting and vulnerability analyses of systems within a network.
• Conduct on-net and off-net activities to control, and exfiltrate data from deployed, automated technologies.
• Conduct open-source data collection via various online tools.
• Conduct survey of computer and digital networks.
• Deploy tools to a target and utilize them once deployed (e.g., backdoors, sniffers).
• Exploit network devices, security devices, and/or terminals or environments using various methods or tools.
• Facilitate access enabling by physical and/or wireless means.
• Identify points of strength and vulnerability within a network.

Requirements

• Minimum 1 year of experience performing any combination of penetration testing, red teaming, or exploitation development.
• Certified Ethical Hacker (CEH), equivalent, or higher certification.
• Proficient in at least one of the following offensive tools:
  • Metasploit
  • Cobalt Strike
  • Core Impact
• Independently operate to conduct penetration testing/red teaming under the guidance of a senior or mid red team operator to accomplish assigned test objectives.
• Independently generate red team report documents.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and verbal communication skills.

Summary

Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward.

In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations.

Tharros. See Everything. Secure Anything.

Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status.