Senior Cyber Penetration Tester & Red Team Lead

tharros; Norfolk (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Tharros in the United States is seeking a Senior Penetration Tester to support OPTEVFOR cyber OT&E. You will help develop cyber test plans, execute tests on operational systems, labs, or cyber ranges, and report results under the supervision of the 01D Cyber Operations Officer.

Responsibilities include reviewing SOPs, contributing to test planning, leading red team activities, using tools like Metasploit, Burp, Nessus, and Core Impact, and generating actionable documentation to maintain DCAT

Qualifications

• Minimum 6 years’ experience performing any combination of: penetration testing, red teaming, or exploitation development.
• Minimum 6 years’ with proficiency in leading red team operators in penetration testing/red teaming to accomplish assigned test objectives.
• Offensive Security Certified Professional (OSCP), OSCE, GX-PT, GXPM, PNPT, or HTB CPTS required.
• Proficient in multiple offensive tools, including: Metasploit, Cobalt Strike, Core Impact, Burp Suite, Nessus, SharpHound BloodHound.
• Ability to validate functionality and safety of offensive tools (exploits) given the source code and document results.
• Independently operate to conduct penetration testing/red teaming to accomplish assigned test objectives.

Responsibilities

• Review and become proficient in OPTEVFOR cyber T&E concept of operations, SOPs, policies and guidance.
• Maintain and participate in the development of 01D SOPs and documentation for DCAT authorization established in DoDI 8585.01.
• Research, review, prioritize, and submit operational requirements for acquisition of equipment or cyber capabilities, following the 01D tool approval process.
• Support development and execution of TTPs for penetration testing or Red Teaming.
• Research adversary cyber actors’ TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into cyber survivability test planning and execution.
• Participate in OPTEVFOR Cyber Test planning: conduct open-source research and system under test documentation review; participate in check point meetings; guide development of test plan objectives; review test plans for feasibility; participate in site visits.

Skills

Penetration testing

Red teaming

Exploitation development

Tools

Metasploit, Cobalt Strike, Core Impact, Burp Suite, Nessus, SharpHound BloodHound

Job description

Tharros in the United States is seeking a Senior Penetration Tester to support OPTEVFOR cyber OT&E. You will help develop cyber test plans, execute tests on operational systems, labs, or cyber ranges, and report results under the supervision of the 01D Cyber Operations Officer.

Responsibilities include reviewing SOPs, contributing to test planning, leading red team activities, using tools like Metasploit, Burp, Nessus, and Core Impact, and generating actionable documentation to maintain DCAT