Penetration Tester

Tharros supports mission-focused cyber work for the US Navy from an onsite role in Norfolk, VA. In this penetration testing position, you will help strengthen operational testing and evaluation by developing and running cyber tests and producing clear reporting of results under the OPTEVFOR cyber OT&E mission. If you value structured testing, hands-on offensive tradecraft, and professional documentation, this role aligns your skills with real operational needs.

Responsibilities

• Assist with the development of cyber test plans, execute cyber tests, and report cyber test results.
• Conduct cyber testing of operational systems across operational, laboratory, and cyber range environments.
• Perform penetration and access attempts against targeted networks and systems using authorized resources and analytic techniques in support of OPTEVFOR’s cyber OT&E mission.
• Analyze target operational architecture to identify potential paths to gain access.
• Conduct network scouting and vulnerability analysis of systems within a network.
• Execute on-net and off-net activities to control and exfiltrate data from deployed automated technologies.
• Perform open-source data collection using various online tools.
• Survey computer and digital networks to support test objectives.
• Deploy and use tools on targets after deployment (for example, backdoors and sniffers).
• Exploit network devices, security devices, and/or terminals or environments using different methods or tools.
• Facilitate access enabling via physical and/or wireless means.
• Identify points of strength and vulnerability across the network.

Requirements

• Minimum 1 year of experience performing any combination of penetration testing, red teaming, or exploitation development.
• CEH (Certified Ethical Hacker), or equivalent, or higher certification.
• Proficiency in at least one offensive tool: Metasploit, Cobalt Strike, or Core Impact.
• Ability to independently conduct penetration testing/red teaming under the guidance of a senior or mid red team operator to achieve assigned test objectives.
• Ability to independently generate red team report documents.
• Proficient in Microsoft Office Suite, including Teams or similar workplace chat and videoconferencing tools.
• Excellent written and verbal communication skills.

Technologies: Certified Ethical Hacker (CEH), Metasploit, Cobalt Strike, Core Impact, Microsoft Office Suite, Teams