Vulnerability Analysis Automation Engineer

The DHS CISA Cybersecurity Division (CSD) Vulnerability Management (VM) Disclosure Branch enables the Government to maintain an analytical edge over adversaries and to support vulnerability coordination activities across the United States. The Disclosure Branch has a requirement to develop a vulnerability ecosystem through partnership and platform development and to create assurance in future software products to deployed in various networks through the expansion of the concept of Software-Bills-of-Materials and other mechanisms to uncover trends, provide solutions, and reduce the risk of products deployed on our Nation's networks.

Tharros is seeking a Vulnerability Analysis Automation Engineer to support this mission. This is an automation-first role. As the mission scales, the only way to keep pace is to automate aggressively - building pipelines and AI-driven tooling that do the repetitive work so analysts can focus on judgment. Tharros is seeking a Vulnerability Analysis Automation Engineer whose default instinct is to automate: someone who sees a manual process and immediately asks how to make it run on its own. You will spend the majority of your time designing, building, and hardening automation that accelerates software development, vulnerability analysis, and day-to-day operations.

• Automate first: identify manual, repetitive, and error-prone processes and replace them with reliable, observable, maintainable automation.
• Design, build, and maintain automated pipelines that reliably build, test, secure, and deploy software to running environments.
• Build AI- and ML-driven tooling - including LLMs and agentic workflows - to automate analysis, triage vulnerability data, and accelerate engineering and operational work.
• Instrument and monitor your automation so it stays trustworthy at scale, and continuously expand what the team can run hands-free.
• Manage and support source code repositories and the development workflows that depend on them.
• Research and evaluate emerging automation and AI tooling, and bring the most promising capabilities into our technical solutions.

• Bachelor's degree in computer science, cybersecurity, or a related field.
• Two or more years of experience designing, building, and maintaining code.
• A strong bias toward automation - a track record of eliminating manual work through scripting, pipelines, or tooling.
• A demonstrated ability to learn new technologies quickly and apply them to improve software and technical solutions.
• Hands-on experience with automated build and deployment pipelines, source code management, and modern software development practices (preferred).
• Familiarity with applying AI/LLM tooling to automate or accelerate technical work - or strong enthusiasm and aptitude for doing so (preferred).
• Strong written and verbal communication skills.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.