Senior Penetration Tester

Tharros has an immediate opportunity to support the US Navy with operational test and evaluation support. The Senior Penetration Tester will assist in the development of cyber test plans, execute cyber tests, and report cyber test results. In this role youwill conduct cyber tests on operational systems, in laboratory environments, or in cyber range environments. Testing may be against physical, virtualized, or cloud-based systems. This position shall leverage all authorized resources and analytic techniques to penetrate/access targeted networks and systems under test in support of OPTEVFORs cyber OT& E mission. Team member will perform these duties under the supervision of the 01D Cyber Operations Officer. Review and become proficient in OPTEVFOR cyber T& E concept of operations, SOPs, policies and guidance.Maintain and participate in the development of 01D SOPs and documentation for DCAT authorization established in DoDI 8585.01.Research, review, prioritize, and submit operational requirements for acquisition of equipment or cyber capabilities, following the 01D tool approval process.Support development and execution of TTPs for penetration testing or Red Teaming. Research adversary cyber actors TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into cyber survivability test planning and execution.Participate in OPTEVFOR Cyber Test planning: Conduct open-source research and system under test documentation review to familiarize with the systems mission, architecture and interfaces including critical components to identify its attack surface and threat vectorsParticipate in check point meetingsGuide development of test plan objectivesReview test plans, ensuring that test plans objectives are feasibleParticipate in test planning site visits Participate in test preparation: Participate in site pre-test coordination visits. Support in-brief to the test site.Lead red team test plan reviewAdd relevant system technical information to test reference libraryOrganize and lead research presentations for advanced capability development in support of future testsPrepare OPTEV-RT test assets (Government Furnished) Execute test events, including Cooperative Vulnerability Penetration Assessments, Adversarial assessments, and Cyber Tabletops, in support of Operational Testing, Developmental Testing, risk reduction events, or other events, as assigned. Use OPTEVFOR provided and NAO approved commercial and open-source network cyber assessment tools (e.g. Core Impact, Nmap, Burp, Metasploit, and Nessus).Employee ethical hacking expertise to exploit discovered vulnerabilities and misconfigurations associated with but not limited to operating systems (Windows, Linux, etc.), protocols (HTTP, FTP, etc.), and network security services (PKI, HTTPS, etc.) to accomplish test objectivesBe able to accomplish testing independently and provide direction to basic and intermediate operatorsEnsure tests are conducted safely, in accordance with the test plan, and OPTEVFOR policies are adhered toFollow Joint Forces Headquarters (JFHQ)-DODIN deconfliction proceduresVerify collected data for accuracy and completeness Participate in the post-test iterative process, including generation of documents (e.g. deficiency/risk sheets).Document lessons learned.Participate in capture the flag events, cyber off sites, external engagements such as red team huddles and red team technical exchange meetings; develop required products and materials in support of these events.Attend OPTEVFOR required meetings in support of OT& E.Generate and update documentation to maintain DCAT authorization compliance per DoDI 8585.0.