ME00629-System Vulnerability Analyst 4

Momentumcareers; Fort Meade (MD); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

11 paid holidays

3 weeks PTO

Company-provided benefits

Job summary

Momentum Engineering, Inc. seeks an experienced System Vulnerability Analyst to support DoD/IC cybersecurity operations.

You will assess, identify, and mitigate vulnerabilities across enterprise networks, systems, and cloud environments while supporting red, blue, and purple team activities. The ideal candidate holds an active Top Secret/SCI clearance with NSA Full Scope Polygraph, deep knowledge of MITRE ATT&CK, NIST, and ISO/IEC 27001, and willingness to travel OCONUS as required.

Qualifications

• Active TS/SCI clearance with NSA Full Scope Polygraph required.
• Experience supporting DoD/IC cybersecurity programs of similar scope.
• Proven Red Team experience and blue/purple team activities.

Responsibilities

• Conduct vulnerability assessments of enterprise networks, systems, and cloud environments to identify weaknesses and mitigation options.
• Support Red Team operations with adversary emulation and vulnerability validation.
• Participate in Blue/ Purple Team activities to improve detection and incident response capabilities.
• Analyze network traffic, logs, endpoint telemetry, and security events to identify malicious activity.
• Apply MITRE ATT&CK to map adversary behaviors and strengthen defenses.
• Collaborate with engineers to implement corrective actions and enhance security posture.
• Travel OCONUS as required to support customer mission requirements.

Skills

Active TS/SCI clearance

Red Team operations

Threat hunting

MITRE ATT&CK

NIST / ISO27001

Education

Master’s degree

Bachelor’s degree

Associate’s degree

Tools

Splunk

Elastic

Microsoft Sentinel

Job description

Momentum Engineering, Inc. fosters an employee-centric culture. Our strength lies in our people. With a high percentage of employees holding advanced degrees in engineering, computer science, and related disciplines, we bring deep technical expertise to every mission. Our team includes professionals with security clearances and full-scope polygraphs, ensuring trusted, secure support for the most sensitive national security initiatives. Additionally, our workforce is equipped with industry-leading certifications, demonstrating a commitment to continuous learning and excellence. Most importantly, our exceptional employee retention rate reflects a culture of professional growth, mission focus, and dedication—ensuring long-term stability and expertise for our customers’ critical needs.

Job Summary

• Seeking an experienced System Vulnerability Analyst to support mission-critical Department of Defense (DoD) and Intelligence Community (IC) cybersecurity operations
• The successful candidate will assess, identify, and mitigate vulnerabilities across enterprise networks, systems, and cloud environments while supporting advanced cyber defense initiatives
• This role requires experience operating in Red Team and Blue/Purple Team environments to evaluate security posture, validate defensive capabilities, and improve organizational resilience against sophisticated cyber threats
• The ideal candidate possesses expertise in network analysis, threat detection, vulnerability assessment, adversary tactics, and Zero Trust security principles
• This position also requires occasional OCONUS travel in support of customer mission requirements

Primary Responsibilities

• Conduct vulnerability assessments and security analyses of enterprise networks, systems, and cloud environments to identify security weaknesses and recommend mitigation strategies
• Support Red Team operations by performing adversary emulation, vulnerability validation, and security assessments to evaluate organizational defenses
• Participate in Blue Team and Purple Team activities to improve detection capabilities, validate defensive controls, and enhance incident response procedures
• Analyze network traffic, system logs, endpoint telemetry, and security event data to identify malicious or unauthorized activity
• Perform network anomaly detection and investigate Indicators of Compromise (IOCs) across multiple data sources
• Apply the MITRE ATT&CK Framework to map adversary behaviors, assess attack techniques, and improve detection and defensive strategies
• Assess network infrastructure, architecture, and system configurations to identify opportunities for security hardening and Zero Trust implementation
• Support cybersecurity initiatives involving Computer Network Exploitation (CNE), Computer Network Operations (CNO), and enterprise network security
• Evaluate security controls against industry standards and best practices, including NIST Cybersecurity Framework, NIST SP 800 Series, and ISO/IEC 27001
• Develop technical reports documenting vulnerabilities, threat assessments, security findings, and remediation recommendations
• Collaborate with cybersecurity engineers, incident responders, system administrators, and network engineers to implement corrective actions and strengthen enterprise security
• Support security testing, validation, and continuous monitoring activities to maintain compliance with organizational security requirements
• Participate in OCONUS travel supporting customer cybersecurity assessments and operational requirements as needed

Required Qualifications

• Must have active Top Secret/SCI clearance with NSA Full Scope Polygraph
• Master’s degree with 9 years of relevant experience, Bachelor’s degree with 11 years of relevant experience, Associate's degree with 13 years of in-depth relevant experience that is clearly related to the position
• Experience supporting cybersecurity operations on programs of similar scope and complexity
• Demonstrated experience conducting Red Team operations
• Experience supporting Blue Team or Purple Team cybersecurity activities
• Experience performing network analysis, network anomaly detection, and threat hunting
• Experience identifying and analyzing Indicators of Compromise (IOCs)
• Strong understanding of the MITRE ATT&CK Framework and adversary tactics, techniques, and procedures (TTPs)
• Knowledge of NIST cybersecurity standards and ISO/IEC 27001 security frameworks
• Experience analyzing security events, network traffic, system logs, and endpoint telemetry
• Strong analytical, troubleshooting, and problem-solving skills
• Willingness and ability to travel OCONUS as required

Desired Qualifications

• Experience supporting Zero Trust Architecture (ZTA) initiatives
• Experience with Computer Network Exploitation (CNE) and Computer Network Operations (CNO)
• Experience assessing and hardening enterprise network infrastructure and system architectures
• Experience performing penetration testing or offensive security assessments
• Experience utilizing vulnerability assessment and security testing tools
• Experience with Security Information and Event Management (SIEM) platforms such as Splunk, Microsoft Sentinel, or Elastic
• Familiarity with Python scripting for automation, analysis, or tool development
• Experience with endpoint detection and response (EDR) platforms and threat intelligence solutions
• Experience supporting Department of Defense or Intelligence Community cybersecurity missions

Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.