Senior Software Assurance & Penetration Testing Engineer

ANALYGENCE; Washington (District of Columbia); On-site; USD 120,000 - 190,000; Full time

Job summary

Tharros in Washington, DC is seeking a Senior Software Assurance and Vulnerability Assessment Engineer to identify, assess, and validate vulnerabilities across DHS Intelligence Enterprise cloud and on-premise systems through penetration testing, software assurance, and vulnerability assessment.

The role emphasizes manual, expert-driven techniques, SOC validation, source code reviews, and ongoing SOP updates, with on-site work in a Government SCIF.

Qualifications

• BS degree or 10+ years IT/cybersecurity experience.
• 7+ years' experience in penetration testing or vulnerability assessment.
• Active TS/SCI clearance and U.S. citizenship; willingness to undergo a DHS counterintelligence-scope polygraph.
• Knowledge of penetration testing methodologies and frameworks (e.g., MITRE ATT&CK, OWASP, PTES).
• Knowledge of software assurance and secure code review practices.
• Knowledge of common attack vectors across network, application, and cloud layers.
• Skill in manual exploitation using tools such as Burp Suite, Metasploit, or Core Impact.
• Skill in static code analysis using tools such as SonarQube or Fortify.
• Ability to write clear penetration test reports with recommended corrective actions.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills.

Responsibilities

• Perform penetration tests across the DHS IE portfolio using standard methodologies (e.g., MITRE ATT&CK, OWASP), from rules of engagement through exploitation, post-exploitation, and reporting.
• Use manual techniques to find vulnerabilities commonly missed by automated tools.
• Validate SOC incident response procedures through controlled testing.
• Perform software assurance through vulnerability and compliance testing of software requests; provide approval recommendations.
• Conduct source code reviews using automated tools and manual processes.
• Perform vulnerability assessments and supply chain risk management reviews.
• Maintain the security posture of the penetration testing kit.
• Update penetration testing, SCRM, and vulnerability assessment SOPs.

Skills

Penetration testing

Vulnerability assessment

Report writing

Communication skills

Manual testing

Education

Bachelor degree in IT/Cybersecurity/IS/CS

10+ years IT/cybersecurity experience

Tools

Burp Suite

Metasploit

Core Impact

SonarQube

Fortify

Job description

Tharros in Washington, DC is seeking a Senior Software Assurance and Vulnerability Assessment Engineer to identify, assess, and validate vulnerabilities across DHS Intelligence Enterprise cloud and on-premise systems through penetration testing, software assurance, and vulnerability assessment.

The role emphasizes manual, expert-driven techniques, SOC validation, source code reviews, and ongoing SOP updates, with on-site work in a Government SCIF.