System Vulnerability Analyst 3

Grvty; Fort Meade (MD); On-site; USD 131,000 - 161,000; Full time

Job summary

GRVTY is seeking experienced System Vulnerability Analysts to identify vulnerabilities and attacks to the design and operation of systems. You will compare attack techniques and develop operational countermeasures, and produce reports and briefings on actual and potential attacks against systems or missions.

Blue Team, Purple Team, or Defensive Cyber Operations experience is required, with travel to CONUS/OCONUS as needed.

Qualifications

• Active TS/SCI clearance with polygraph.
• PhD in Computer Science or related field with 4+ years experience.
• MS in CS or related with 6 years experience.
• BS in CS or related with 8 years experience.
• AS degree with 10+ years experience.
• Degree must be in CS or related field.
• Military cyber training completed will count toward experience.
• Blue Team, Purple Team, or DCO experience required.
• Experience with log analysis, EDR, network analysis, and MITRE ATT&CK.

Responsibilities

• Identify vulnerabilities and attacks related to operations and missions.
• Compare attack techniques and develop countermeasures.
• Produce reports, briefings, and perspectives on attacks against systems or missions.
• Engage in Blue Team, Purple Team, or Defensive Cyber Operations efforts.
• OCONUS travel is required.
• Analyze data to detect malicious or unauthorized activity from multiple sources.

Skills

Log analysis

EDR

Network analysis

MITRE ATT&CK

NIST CSF

IOC handling

Education

Doctoral degree

Master's degree

Bachelor's degree

Associates degree

Job description

GRVTY is seeking experienced System Vulnerability Analysts to identify vulnerabilities of and attacks to the design and operation of a system (H/W, S/W, personnel, procedures, logistics, and physical security) by relating vulnerabilities and attacks to effects on operations and missions supported by those systems.

What You'll be Owning

• You will compare and contrast various system attack techniques and develop operationally effective countermeasures.
• You will also produce formal and informal reports, briefings, and perspectives of actual and potential attacks against the systems or missions being studied.
• Blue Team, Purple Team, or Defensive Cyber Operations (DCO) focused experience is required, and any experience conducting assessments is preferred.
• OCONUS travel is required.
• The ability to exploit captured media and/or investigate computer security incidents in order to derive useful intelligence and/or enable mitigation of network vulnerabilities.
• Relevant experience must be in the design/development of computer or information systems, programming, computer/network security, vulnerability analysis, penetration testing, computer forensics, and/or systems engineering

What You Must Have

• Active TS/SCI clearance with polygraph.
• Doctoral degree with 4 years of relevant experience.
• Master’s degree with 6 years of relevant experience.
• Bachelor’s Degree with 8 years of relevant experience.
• Associates degree with 10 years of relevant experience.
• Degree must be in Computer Science or a related field (e.g. General Engineering, Computer Engineering, System Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Information Assurance, and Information Security.
• Completion of military training in a relevant area such as JCAC (Joint Cyber Analysis Course), Undergraduate Cyber Training (UCT), Network Warfare Bridge Course (NWBC)/Intermediate Network Warfare Training (INWT), Cyber Defense Operations will be considered towards the relevant experience required (i.e. 20-24 weeks course will count as 6 months of experience, 10-14 weeks will count as 3 months or experience).
• Blue Team, Purple Team, or Defensive Cyber Operations (DCO) focused experience is required.
• Analyst should be comfortable with log analysis, endpoint detection and response (EDR), network analysis, network anomaly detection, IOC’s, MITRE ATT&CK framework, and NIST CSF policy, and should be able to analyze data to discover malicious or unauthorized activity collected from various sources.

Certifications Required:

• Information Assurance Certification may be required.

Pay Range:

At GRVTY, we understand that compensation is influenced by many factors—such as geographic location, federal contract labor categories, wage rates, prior experience, skillsets, education, and certifications. We’re proud to offer a work environment that empowers our team to achieve a strong work-life balance. GRVTY provides competitive pay, comprehensive benefits, and meaningful opportunities for professional growth. Our benefits package is designed to support the well-being of our employees and their families, and includes coverage in areas such as healthcare, financial wellness, retirement planning, family assistance, continued education, and paid time off.

• The pay range for this position is: $131000.00 - $161000.00