Strategic Cyber Risk & Vulnerability Analyst

NTT DATA North America; Arlington (VA); On-site; USD 110,179 - 183,631; Full time

Job summary

NTT DATA seeks a Cybersecurity and Risk Analyst to join the VAPT team, identifying and mitigating cybersecurity risks across enterprise systems, networks, and applications. You will perform vulnerability assessments, risk evaluations, and threat simulations aligned with NIST SP 800-53, FISMA, and ISO/IEC 27001.

You will provide actionable reports to leadership, support audits, and collaborate with cross‑functional teams to improve security posture and compliance across federal directives and

Qualifications

• Master’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science.
• Education equivalency: 1.5 years of additional experience can substitute for one year of a typical degree program.
• Minimum 8 years of experience in IT and/or Information Security.
• DoD 8140 certification or ability to obtain within 6 months of onboarding.
• Active Secret or higher security clearance; eligible for Top-Secret if requested.

Responsibilities

• Vulnerability Assessment & Risk Evaluation across systems, apps, OT assets, and cloud environments.
• Analyze, validate, and prioritize vulnerabilities by severity, exploitability, and business impact.
• Perform risk assessments using NIST SP 800-30 and ISO 27005.
• Maintain risk registers and communicate risk to owners and leadership.
• Participate in threat analysis, red team operations, and adversary emulation assignments.
• Correlate CVEs and MITRE ATT&CK to assess real-world exploitability.
• Provide risk-related reporting and executive summaries.

Skills

Vulnerability assessment

Risk evaluation

Threat analysis

Red team / adversary emulation

Policy & compliance

Reporting & documentation

Cross-functional collaboration

Education

Master’s degree

Tools

NIST SP 800-53

ISO 27001

Job description

NTT DATA seeks a Cybersecurity and Risk Analyst to join the VAPT team, identifying and mitigating cybersecurity risks across enterprise systems, networks, and applications. You will perform vulnerability assessments, risk evaluations, and threat simulations aligned with NIST SP 800-53, FISMA, and ISO/IEC 27001.

You will provide actionable reports to leadership, support audits, and collaborate with cross‑functional teams to improve security posture and compliance across federal directives and