## Overview Tharros combines extensive cyber defense knowledge with the world’s preeminent vulnerability expertise to identify and defend against attacks before they become problems. Working at mission speed, we harden mission systems faster and secure them for longer, so agencies never lose the mission edge. Tharros lifts the veil of enterprise cybersecurity to detect zero days before they affect you, enabling mission maneuverability and the confidence to move missions forward. In the ever-evolving realm of cyberspace, we are dedicated to becoming the paramount defender in the 5th warfighting domain. By pioneering innovative security solutions and fostering an environment of continuous learning and vigilance, we aim to protect the interests of our nation’s security. Our commitment to excellence in cybersecurity will establish new benchmarks, transforming the digital landscape into a secure and thriving frontier for future generations. Tharros. See Everything. Secure Anything. Tharros is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer and make employment decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected status. ## Description The DHS CISA Cybersecurity Division (CSD) Vulnerability Management (VM) Disclosure Branch enables the Government to maintain an analytical edge over adversaries and to support vulnerability coordination activities across the United States. The Disclosure Branch has a requirement to develop a vulnerability ecosystem through partnership and platform development and to create assurance in future software products to deployed in various networks through the expansion of the concept of Software-Bills-of-Materials and other mechanisms to uncover trends, provide solutions, and reduce the risk of products deployed on our Nation’s networks. Tharros is seeking a Software Vulnerability Analyst to support the analytical core of this mission. You will analyze software vulnerabilities, support coordinated disclosure, and help surface risk across the software ecosystem — growing your expertise alongside senior analysts while putting automation and AI to work on the day-to-day analytical load. ## What You'll Do: - Analyze software vulnerabilities — assessing root cause, exploitability, and impact across components and dependencies. - Support vulnerability disclosure activities in coordination with researchers, vendors, and government partners. - Analyze dependency and component data to help uncover trends and surface risk across the software ecosystem. - Apply established analytical standards, triage criteria, and workflows, and help refine them over time. - Use automation and AI/LLM tooling to scale vulnerability analysis and review its output for accuracy. ## Requirements ## What We're Looking For: - Bachelor's degree in computer science, cybersecurity, or a related field. - 2+ years of hands-on vulnerability analysis experience — assessing, triaging, and reasoning about software vulnerabilities and their impact. - Working understanding of the vulnerability lifecycle, disclosure processes, and scoring/classification frameworks (e.g., CVE, CWE, CVSS). - Ability to analyze software and dependency relationships. - Familiarity with applying automation and AI/LLM tooling to scale vulnerability analysis (preferred). - Background supporting U.S. Government or critical-infrastructure cybersecurity missions (preferred). - Strong written and verbal communication skills. - Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.