Senior Cyber Vulnerability & Software Assurance Engineer

Tharros; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Training reimbursement (up to $5,250/€

Competitive compensation

Medical, dental, vision, disability

SAV retirement & paid leave

Job summary

Tharros in Washington DC seeks a Senior Software Assurance and Vulnerability Engineer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region. The role covers penetration testing, software assurance, vulnerability assessment, and cyber supply chain risk management across secure cloud and hybrid environments.

You will identify systemic weaknesses, validate exploitability, and deliver remediation recommendations with strong written and verbal communication,

Qualifications

• Strong written and verbal communication skills required.
• Active Top Secret clearance with SCI eligibility preferred.
• 10+ years in cybersecurity assessment, penetration testing, or vulnerability assessment.
• 2+ years in areas: software assurance, penetration testing with automated tools, vulnerability assessment, secure cloud and cross-domain testing.

Responsibilities

• Conduct penetration testing, vulnerability assessments, and software assurance for Federal mission systems.
• Perform testing using MITRE ATT&CK, OWASP, and NIST 800-115.
• Support pre-engagement planning, rules of engagement, and reporting.
• Translate findings into remediation plans, risk insights, and POA&Ms.
• Maintain testing kits, tooling, and procedures; contribute to secure cloud and DevSecOps efforts.

Skills

Strong written and verbal commu­n ica

Onsite work ability

Leadership

Education

CEH

CISSP

Tools

MITRE ATT&CK

OWASP

NIST 800-115

Archer

eMASS

Xacta

Job description

Tharros in Washington DC seeks a Senior Software Assurance and Vulnerability Engineer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region. The role covers penetration testing, software assurance, vulnerability assessment, and cyber supply chain risk management across secure cloud and hybrid environments.

You will identify systemic weaknesses, validate exploitability, and deliver remediation recommendations with strong written and verbal communication,