Senior Penetration Testing, Software Assurance and Vulnerability

Job Description

Job Description

Location: Washington, DC (On-site)

We are seeking a highly experienced Senior Penetration Testing, Software Assurance, and Vulnerability Assessment Engineer to provide technical expertise in penetration testing, software assurance, vulnerability assessment, and cybersecurity engineering. The successful candidate will support the identification, assessment, and mitigation of security vulnerabilities across enterprise, cloud, hybrid, and cross-domain environments while ensuring alignment with Federal cybersecurity requirements and best practices.

The ideal candidate will possess extensive experience performing penetration testing using automated tools, supporting secure engineering initiatives, and strengthening the overall cybersecurity posture of mission-critical systems.

Key Responsibilities:

• Perform penetration testing using a range of automated tools to identify and validate security vulnerabilities.
• Conduct software assurance activities to evaluate and improve application security.
• Perform vulnerability assessments and recommend appropriate remediation strategies.
• Support security patch management activities to reduce cybersecurity risk.
• Provide cybersecurity engineering support for secure cloud and hybrid environments.
• Support cybersecurity activities involving Cross Domain Solutions (CDS).
• Develop technical findings, risk assessments, and remediation recommendations.
• Collaborate with Government stakeholders and technical teams to improve system security and resilience.
• Support the implementation of cybersecurity best practices across enterprise environments.

Minimum Qualifications:

• Minimum 10 years of demonstrated cybersecurity experience.
• At least 2 years of recent experience in each of the following areas:
• Software assurance
• Penetration testing using a range of automated tools
• Vulnerability assessment
• Security patch management
• Secure cloud and hybrid engineering
• Cross Domain Solutions (CDS)
• Demonstrated experience identifying, assessing, and mitigating cybersecurity vulnerabilities.
• One of the following qualification paths:
• Certified Ethical Hacker (CEH) and Certified Information Systems Security Professional (CISSP) certifications, in good standing; or
• Comparable demonstrable experience.

Preferred Qualifications:

• Current or prior experience supporting the U.S. Department of Homeland Security (DHS).
• Demonstrated experience working within DHS organizations or supporting DHS penetration testing, software assurance, and vulnerability assessment initiatives is highly preferred.