ZipRecruiter

Log In

1

Junior Vulnerability Assessment Penetration Testing Jobs

Analygence

Senior Penetration Tester

Washington, DC · On-site

Conduct penetration testing, vulnerability assessments, software assurance, and cyber supply chain risk management activities for Federal mission systems. * Perform full-scope security testing using ...

Analygence

Senior Penetration Tester

Washington, DC · Hybrid

Tharros is seeking a Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital ...

Dark Wolf Solutions

Penetration Tester

Washington, DC · On-site

$130K - $145K/yr

As a Junior Product and Hardware Security Penetration Tester, you will have the chance to work on ... cross-domain vulnerability assessments, network penetration testing, and phishing/social ...

Dark Wolf Solutions

Penetration Tester

Washington, DC · Hybrid

$130K - $145K/yr

As a Junior Product and Hardware Security Penetration Tester, you will have the chance to work on ... cross-domain vulnerability assessments, network penetration testing, and phishing/social ...

Dark Wolf Solutions

Penetration Tester

Herndon, VA · Hybrid

$130K - $145K/yr

As a Junior Product and Hardware Security Penetration Tester, you will have the chance to work on ... cross-domain vulnerability assessments, network penetration testing, and phishing/social ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Minimum six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing * Minimum three (3) years of experience with testing tools, including NESSUS ...

asrcfh

Penetration Tester

Quantico, VA · Hybrid

Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ... Vulnerability Assessment: * * Perform vulnerability assessments using automated scanning tools and ...

asrcfh

Penetration Tester

Quantico, VA · Hybrid

Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ... Vulnerability Assessment: * * Perform vulnerability assessments using automated scanning tools and ...

Govcio LLC

Senior Penetration Tester

Washington, DC · On-site

$124K - $180K/yr

Lead, plan, and oversee penetration testing operations for systems, networks, cloud resources, and web-based applications in a TS/SCI environment * Execute comprehensive vulnerability assessments and ...

ASRC Federal Holding

Penetration Tester

Quantico, VA · On-site

Experience with a variety of penetration testing tools and techniques (e.g., Rapid7 Nexpose ... Vulnerability Assessment: * * Perform vulnerability assessments using automated scanning tools and ...

Goldbelt, Inc.

Senior Penetration Tester

$90K - $150K/yr

Minimum six (6) years proven proficiency in performing extensive vulnerability assessment and penetration testing * Minimum three (3) years of experience with testing tools, including NESSUS ...

next page

Showing results 1-20

All JobsVulnerability Assessment Penetration Testing JobsJunior Vulnerability Assessment Penetration Testing Jobs

Junior Vulnerability Assessment Penetration Testing information

See salary details

$33.5K

$71.8K

$109.5K

How much do junior vulnerability assessment penetration testing jobs pay per year?

As of Jul 28, 2026, the average yearly pay for junior vulnerability assessment penetration testing in the United States is $71,799.00, according to ZipRecruiter salary data. Most workers in this role earn between $48,500.00 and $80,000.00 per year, depending on experience, location, and employer.

What is the difference between Junior Vulnerability Assessment Penetration Testing vs Junior Security Analyst?

AspectJunior Vulnerability Assessment Penetration TestingJunior Security Analyst
CertificationsCompTIA Security+, CEH (Certified Ethical Hacker)CompTIA Security+, SSCP
Work EnvironmentHands-on testing, simulated attacks, penetration toolsMonitoring security alerts, policy enforcement, risk assessment
Employer & Industry UsageCybersecurity firms, IT departments, consultingCorporate security teams, government agencies

Junior Vulnerability Assessment Penetration Testers focus on identifying and exploiting security weaknesses through active testing, while Junior Security Analysts monitor and analyze security systems to prevent breaches. Both roles require security certifications and are vital in cybersecurity, but they differ in daily tasks and focus areas.

More about Junior Vulnerability Assessment Penetration Testing jobs
What cities are hiring for Junior Vulnerability Assessment Penetration Testing jobs? Cities with the most Junior Vulnerability Assessment Penetration Testing job openings:
What are the most commonly searched types of Vulnerability Assessment Penetration Testing jobs? The most popular types of Vulnerability Assessment Penetration Testing jobs are:
What states have the most Junior Vulnerability Assessment Penetration Testing jobs? States with the most job openings for Junior Vulnerability Assessment Penetration Testing jobs include:
What job categories do people searching Junior Vulnerability Assessment Penetration Testing jobs look for? The top searched job categories for Junior Vulnerability Assessment Penetration Testing jobs are:
Junior Vulnerability Assessment Penetration Testing jobs near you
Infographic showing various Junior Vulnerability Assessment Penetration Testing job openings in the United States as of July 2026, with employment types broken down into 2% As Needed, 79% Full Time, 16% Part Time, and 3% Contract. Highlights an 92% Physical, 2% Hybrid, and 6% Remote job distribution, with an average salary of $71,799 per year, or $34.5 per hour.
Senior Penetration Tester

Senior Penetration Tester

Analygence

Washington, DC • On-site

Full-time

Posted 22 days ago

Job description

Description
Tharros is seeking a Senior Penetration Testing, Software Assurance and Vulnerability Assessment Engineer to support a DHS Intelligence and Analysis cybersecurity program in the National Capital Region.
This role will support advanced penetration testing, software assurance, vulnerability assessment, cyber supply chain risk management, secure cloud and hybrid engineering, and cross-domain security assessment activities. The ideal candidate is a senior technical assessor who can go beyond automated scanning to identify systemic weaknesses, validate exploitability, assess operational impact, and provide clear remediation recommendations for complex mission environments.
Responsibilities:
  • Conduct penetration testing, vulnerability assessments, software assurance, and cyber supply chain risk management activities for Federal mission systems.
  • Perform full-scope security testing using established methodologies such as MITRE ATT&CK, OWASP, NIST 800-115, and related Federal or IC assessment practices.
  • Support pre-engagement planning, rules of engagement, intelligence gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation, and reporting.
  • Use approved automated and manual testing methods to identify vulnerabilities, validate exploitability, and assess potential business and operational impacts.
  • Identify vulnerabilities commonly missed by automated tools through manual, expert-driven testing techniques.
  • Assess SOC detection and response capabilities through controlled testing activities.
  • Produce penetration testing reports, vulnerability assessment reports, software assurance recommendations, and corrective action guidance.
  • Support software assurance through vulnerability and compliance testing, source code review, static/dynamic analysis, dependency review, and software supply chain risk identification.
  • Conduct vulnerability assessments and interpret results to recommend corrective actions and mitigation strategies.
  • Support secure cloud, hybrid, DevSecOps, application, identity, API, microservices, CI/CD, Zero Trust, and cross-domain assessment activities.
  • Maintain secure testing kits and assessment tooling, including patching, configuration updates, and approved tool management.
  • Update and maintain penetration testing, SCRM, and vulnerability assessment procedures.
  • Support audits, working groups, and stakeholder briefings related to penetration testing, software assurance, vulnerability assessment, and cyber supply chain risk.
  • Identify opportunities to improve testing processes, automate assessment workflows, strengthen reporting, and produce useful metrics for leadership and technical stakeholders.
  • Translate assessment findings into actionable remediation plans, risk insights, POA&M inputs, dashboards, and decision-ready reporting.

Requirements
  • Active TS/SCI w Poly
  • 10+ years of related cybersecurity assessment, penetration testing, software assurance, vulnerability assessment, or cyber supply chain risk experience.
  • 2+ years of recent experience in each of the following areas: software assurance, penetration testing with automated tools, vulnerability assessment, security patch management, secure cloud and hybrid engineering, and
  • Cross Domain Solutions.
  • CEH and CISSP certifications, or comparable demonstrable experience.
  • Experience conducting penetration testing, vulnerability assessments, software assurance, source code review, SCRM, and cyber supply chain management activities.
  • Experience using both automated tools and manual testing processes to identify, validate, and document vulnerabilities.
  • Experience producing technical reports, corrective action recommendations, mitigation strategies, and executive-ready summaries.
  • Strong understanding of vulnerability management, exploitability, secure configuration, remediation validation, and operational risk.
  • Strong written and verbal communication skills.
  • Ability to work onsite at a government-approved location as required.

Preferred Qualifications:
  • Prior DHS, Intelligence Community, DoD, CISA, classified red team, software assurance, SCRM, CVPA, vulnerability research, or national security cyber assessment experience.
  • Experience with MITRE ATT&CK, OWASP, NIST 800-115, IC "Raise the Bar," NIST SP 800-161, CNSSI 1253, DHS 4300C, or related Federal/IC cybersecurity frameworks.
  • Experience testing cloud, application, identity, API, microservices, CI/CD, DevSecOps, Zero Trust, cross-domain, and hybrid TS/SCI environments.
  • Experience with SBOM analysis, static/dynamic code analysis, dependency review, source code review, exploit validation, secure configuration, and remediation validation.
  • Experience with GRC platforms such as Archer, eMASS, or Xacta, including the ability to translate findings into POA&Ms, dashboards, scorecards, and remediation workflows.

Apply