IT Analyst Mid Level – Vulnerability Assessment Analyst

Cherokee Federal; Huntsville (AL); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

Job summary

Cherokee Federal is hiring an IT Analyst Mid Level - Vulnerability Assessment Analyst at Redstone Arsenal, AL. The role focuses on identifying, analyzing, and reporting vulnerabilities across an organization’s systems, networks, and applications, with incident coordination to strengthen security posture.

The candidate will correlate data from multiple sources, produce actionable remediation recommendations, and maintain knowledge of cyber defense policies and compliance requirements.

Qualifications

• Active TS/SCI clearance required.
• Bachelor’s degree in information systems, cybersecurity, or related field.
• Experience in DoD/IC or related environments (5+ years) preferred.

Responsibilities

• Measure the effectiveness of defense-in-depth architectures against known vulnerabilities.
• Analyze vulnerability scans, penetration testing, and threat modeling to prepare remediation reports.
• Assess data from multiple sources monitoring systems and attack methods.
• Provide summaries, trend analyses, and security posture assessments.
• Perform vulnerability assessments across networks, systems, applications, and enclave boundaries.
• Identify deviations from configurations, policies, and security standards.
• Maintain knowledge of cyber defense policies and compliance requirements.

Skills

Risk analysis

Threat analysis

Operational review

Network security

Vulnerability assessment

Threat monitoring

Event correlation

Cybersecurity basics

Education

Bachelor's degree in information systems or cybersecurity

Tools

IDS/IPS

Vulnerability scanners

SIEM

Network monitoring

Job description

IT Analyst Mid Level - Vulnerability Assessment Analyst

This position requires an active TS/SCI clearance

Location- Redstone Arsenal, AL

Cybersecurity professional responsible for identifying, analyzing, and reporting vulnerabilities across an organization's systems, networks, and applications. Correlates data across multiple sources to assess attack effectiveness, review infrastructure, and response. Documents, tracks, escalates, and coordinates incident activities with enterprise cyber defense teams to support validation, containment, mitigation, and recovery. Produces detailed incident reports describing nature, scope, status, and operational impact of cybersecurity compromises. Reports will include actionable recommendations to strengthen the organization’s security posture.

Compensation & Benefits:

Estimated Starting Salary Range for Program Manager: Pay commensurate with experience.

Full-time benefits include Medical, Dental, Vision, 401K and other possible benefits as provided. Benefits are subject to change with or without notice.

Key Responsibilities

• Measure the effectiveness of defense-in-depth architectures against known vulnerabilities.

• Analyze vulnerability scans, penetration testing, and threat modeling to prepare detailed audit or assessment reports with remediation recommendations.

• Able to assess data pertinent to multiple sources which monitor systems and assess the effectiveness of various attack methods.

• Provide summaries, trend analyses, and security posture assessments.

• Perform technical and non-technical vulnerability assessments across networks, systems, applications, and enclave boundaries.

• Identify deviations from acceptable configurations, policies, and security standards.

• Maintain knowledge of cyber defense policies, regulations, and compliance requirements.

Required Skills & Qualifications

• Risk & Threat Analysis: Assess the potential impact of compromised information and recommend protective measures

• Operational Review: Examine operational procedures, communication systems, and information handling to recommend mitigation strategies

• Technical Skills: Network security, intrusion detection/prevention, vulnerability assessment, network monitoring, and security tool management.

• Analytical Skills: Event correlation, threat analysis, and situational awareness.

• Knowledge Areas: Cybersecurity principles, networking protocols, laws/regulations, and ethics in cybersecurity.

• Experience: 5+ years in a similar role; in defense sectors, 5-10 years in DoD/IC or related environments

• Must pass pre-employment qualifications of Cherokee Federal

Education

- bachelor's degree in information systems, cybersecurity, or related field

Certifications

- Certified Ethical Hacker (CEH), OffSec OSCP (PEN-200), SANS SEC660 (Advanced Penetration Testing), SANS LDR516 (Strategic Vulnerability & Threat Management) or other relevant credentials not required but preferred

Company Information:

Cherokee Nation Federal - the division of tribally owned federal contracting companies owned by Cherokee Nation Businesses. As a trusted partner for more than 60 federal clients, Cherokee Federal LLCs are focused on building a brighter future, solving complex challenges, and serving the government’s mission with compassion and heart. To learn more about CNDS, visit cherokee-federal.com.

#CherokeeFederal #LI

Legal Disclaimer:

Cherokee Federal is an equal opportunity employer. Please visit cherokee-federal.com/careers for information regarding our Accommodation request, and Presidential EO 14042 Notice.