Senior Penetration Tester & Security Assessment Lead

tharros; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Tharros is seeking a highly skilled Penetration Tester to assess threats, identify vulnerabilities, and develop mitigations across enterprise networks and systems. This role involves evaluating policies, configurations, and security controls within a government-style cyber environment.

The candidate will perform authorized testing, create audit reports, and support risk assessments. A Top Secret clearance with SCI eligibility is required, along with substantial experience in cyber defense

Qualifications

• Bachelor's degree in a related field; 8–12 years of penetration testing experience.
• Top Secret clearance with SCI eligibility is required.
• Strong knowledge of networks, protocols and risk management.
• Understanding cryptography, key management and IT security concepts.

Responsibilities

• Analyze cyber defense policies and configurations for compliance with regulations.
• Assess software vulnerabilities and develop exploit approaches.
• Develop exploits focusing on non-interference with mission partner systems.
• Perform authorized penetration testing on enterprise network assets.
• Maintain deployable cyber defense audit toolkit and related software/hardware.
• Prepare audit reports with findings and remediation suggestions.
• Review environment components for security effectiveness (TSCM, TEMPEST).
• Conduct risk/vulnerability assessments across networks, enclaves, and apps.
• Recommend cost-effective security controls to reduce risk.

Skills

Penetration testing

Threat modeling

Vulnerability assessment

Risk assessment

Network security

Cryptography

OS hardening

Education

Bachelor's degree in related field

Tools

Wireshark

nmap

tcpdump

Job description

Tharros is seeking a highly skilled Penetration Tester to assess threats, identify vulnerabilities, and develop mitigations across enterprise networks and systems. This role involves evaluating policies, configurations, and security controls within a government-style cyber environment.

The candidate will perform authorized testing, create audit reports, and support risk assessments. A Top Secret clearance with SCI eligibility is required, along with substantial experience in cyber defense