Penetration Tester

Tharros is seeking a Penetration Tester to support the US Navy with operational test and evaluation (OT&E) support. This onsite role focuses on planning and conducting cyber tests, performing authorized penetration and access activities, and producing reporting deliverables for OPTEVFOR’s cyber OT&E mission.

Role Overview

The Penetration Tester will conduct cyber testing across operational systems, laboratory environments, or cyber range environments. Work includes authorized penetration or access of targeted networks and systems, along with activities to support test planning, execution, and results reporting.

Responsibilities

• Assist in the development of cyber test plans.
• Execute cyber tests aligned to assigned objectives.
• Report cyber test results in support of operational test and evaluation needs.
• Conduct cyber tests on operational systems, laboratory environments, and cyber range environments.
• Perform on-net and off-net activities to control and exfiltrate data from deployed, automated technologies.
• Conduct open-source data collection using various online tools.
• Survey computer and digital networks to support target understanding.
• Analyze target operational architecture to identify potential access paths.
• Conduct network scouting and vulnerability analyses of systems within a network.
• Deploy tools to targets and use them after deployment (for example, backdoors and sniffers).
• Exploit network devices, security devices, and/or terminals or environments using various methods or tools.
• Facilitate access via physical and/or wireless means.
• Identify points of strength and vulnerability within a network.

Requirements

• Minimum 1 year of experience performing any combination of penetration testing, red teaming, or exploitation development.
• Certified Ethical Hacker (CEH), or equivalent, or higher certification.
• Proficient in at least one offensive tool: Metasploit, Cobalt Strike, or Core Impact.
• Ability to independently operate to conduct penetration testing/red teaming under the guidance of a senior or mid red team operator to accomplish assigned test objectives.
• Ability to independently generate red team report documents.
• Proficient in Microsoft Office Suite, including Teams or similar workplace chat and videoconferencing tools.
• Excellent written and verbal communication skills.

Tools and Technologies

• Metasploit
• Cobalt Strike
• Core Impact
• Microsoft Office Suite
• Teams