Senior Vulnerability & Pen Testing Specialist (Lvl III)

Rividium; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

RiVidium is seeking a Vulnerability Assessment & Penetration Testing Specialist Level III to serve as the senior technical expert. You will plan, execute, and lead advanced penetration testing, vulnerability assessments, software assurance, and SCRM activities across DHS Intelligence Enterprise systems.

You will leverage MITRE ATT&CK, OWASP, and NIST guidance, deliver SARs/VARs, and collaborate with SOC, engineers, and government stakeholders to reduce risk and ensure compliance with federal

Qualifications

• Active TS/SCI clearance or equivalent.
• 7–10 years of penetration testing, vulnerability assessment, software assurance, and offensive cyber activities in federal contexts.
• CE/CS/IS-related degree with relevant certifications.

Responsibilities

• Lead and conduct comprehensive penetration testing engagements for DHS Intelligence Enterprise systems, networks, apps, clouds, and infrastructure.
• Plan and execute all phases of testing including pre-engagement, ROE, threat intel, exploitation, and remediation recommendations.
• Develop SARs/VARs, document testing methodology, and map findings to MITRE ATT&CK.
• Perform secure code reviews and software assurance reviews to strengthen software supply chain security.
• Collaborate with SOC, engineers, ISSOs/ISSMs, and stakeholders to remediate identified vulnerabilities.

Skills

Penetration testing

Vulnerability assessment

Software assurance

Threat modeling

MITRE ATT&CK

NIST frameworks

OWASP

Red team techniques

Scripting (Python/PowerShell)

Education

Bachelor's degree in Cybersecurity or related field

Tools

Burp Suite Pro

Nessus/ACAS

Nmap

Metasploit

Kali Linux

Job description

RiVidium is seeking a Vulnerability Assessment & Penetration Testing Specialist Level III to serve as the senior technical expert. You will plan, execute, and lead advanced penetration testing, vulnerability assessments, software assurance, and SCRM activities across DHS Intelligence Enterprise systems.

You will leverage MITRE ATT&CK, OWASP, and NIST guidance, deliver SARs/VARs, and collaborate with SOC, engineers, and government stakeholders to reduce risk and ensure compliance with federal