Senior Software Assurance & Vulnerability Engineer

Jimmy Jazz; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Job summary

Tharros, a cybersecurity services provider, seeks a Senior Software Assurance and Vulnerability Assessment Engineer for on-site work in a Government SCIF, Washington, DC. The role focuses on identifying and validating vulnerabilities through penetration testing, software assurance, and vulnerability assessment across DHS Intelligence Enterprise cloud and on-premises systems.

Requirements include a TS/SCI clearance, a BS degree or 10+ years in IT/cyber, and 7+ years in relevant testing.

Qualifications

• BS degree or 10+ years in IT/cybersecurity
• Minimum 7 years in penetration testing or vulnerability assessment
• Active TS/SCI clearance and US citizenship; willing to take DHS polygraph
• Knowledge of MITRE ATT&CK and OWASP frameworks
• Knowledge of software assurance and secure code review practices
• Knowledge of attack vectors across network, application, and cloud layers
• Experience with manual exploitation using Burp Suite, Metasploit, or Core Impact
• Proficient with MS Office; strong written and oral communication
• Certifications: OSCP/GPEN/GWAPT/CEH/CISSP
• Cloud testing experience (AWS/Azure) or Cross Domain Solution testing

Responsibilities

• Perform penetration tests across DHS IE portfolio using standard methodologies
• Use manual techniques to identify vulnerabilities overlooked by automated tools
• Validate SOC incident response through controlled testing
• Conduct software assurance via vulnerability and compliance testing of software requests
• Perform source code reviews using automated tools and manual processes
• Carry out vulnerability assessments and supply chain risk reviews
• Maintain the penetration testing kit and update SOPs

Skills

Penetration testing

Vulnerability assessment

Software assurance

Secure code review

SOC validation

Education

B.S. in IT/Cybersecurity/IS/CS

Tools

Burp Suite

Metasploit

Core Impact

SonarQube

Fortify

Job description

Tharros, a cybersecurity services provider, seeks a Senior Software Assurance and Vulnerability Assessment Engineer for on-site work in a Government SCIF, Washington, DC. The role focuses on identifying and validating vulnerabilities through penetration testing, software assurance, and vulnerability assessment across DHS Intelligence Enterprise cloud and on-premises systems.

Requirements include a TS/SCI clearance, a BS degree or 10+ years in IT/cyber, and 7+ years in relevant testing.