Senior Penetration Tester & Vulnerability Expert DC Onsite

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 180,000 - 230,000; Full time

Job summary

Tharros is seeking a Senior Penetration Tester / Vulnerability Assessment Engineer to support DHS with vulnerability identification, assessment, and validation across cloud and on-prem environments. The role requires on-site work in a Government SCIF in Washington, DC.

This position covers the full lifecycle of testing and reporting, from engagement through exploitation to post-exploitation, yielding actionable security improvements.

Qualifications

• BS degree or 10+ years IT/cybersecurity experience.
• Experience in penetration testing and vulnerability assessment.
• Knowledge of MITRE ATT&CK, OWASP, PTES.

Responsibilities

• Conduct penetration tests using MITRE ATT&CK and OWASP.
• Apply manual testing to find hidden vulnerabilities.
• Validate SOC incident response procedures.
• Perform software assurance and secure code reviews.
• Review source code with automated and manual methods.
• Conduct vulnerability assessments and SCRM reviews.
• Maintain testing kit and update SOPs.

Skills

Manual testing

Penetration testing

Vulnerability assessment

Technical reporting

Clear communication

Education

BS in IT/Cybersecurity/CS

Tools

Burp Suite

Metasploit

Core Impact

SonarQube

Fortify

Microsoft Office Suite

Teams

AWS

Azure

Job description

Tharros is seeking a Senior Penetration Tester / Vulnerability Assessment Engineer to support DHS with vulnerability identification, assessment, and validation across cloud and on-prem environments. The role requires on-site work in a Government SCIF in Washington, DC.

This position covers the full lifecycle of testing and reporting, from engagement through exploitation to post-exploitation, yielding actionable security improvements.