Threat Intelligence & Vulnerability Analyst

VulnCheck; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Unlimited PTO

401k match

Healthcare coverage

Parental leave

Remote friendly

Phone & Internet reimbursement

Professional development

Career advancement

Job summary

VulnCheck is seeking a Vulnerability & Threat Intelligence Analyst who thrives on deep-dive research across diverse threat data to validate exploited vulnerabilities, active exploits, threat actors, and IOCs. This fully remote role prefers candidates in MA, MD or Greater Austin TX.

You will analyze sources, assess exploitation evidence, and produce structured, high-quality intelligence outputs to support secure development and defense of critical infrastructure.

Qualifications

• Experience analyzing threat intel to identify exploited vulnerabilities, exploits, and IOCs.
• Ability to evaluate exploit PoCs and scripting familiarity.
• Experience with OSINT tools and threat intel data formats (JSON).
• Understanding of CVEs, including assignment, validation, and scoring.
• Attention to detail and ability to assess credibility of sources.
• Familiarity with package ecosystems (NPM, NuGet, PyPI).
• Experience with developer/security tooling (e.g., VS Code).
• Knowledge of end-of-life software data.

Responsibilities

• Analyze diverse threat intelligence sources to identify and confirm exploited vulnerabilities, PoCs, threat actors, and IOCs.
• Validate accuracy and credibility of sources and findings.
• Assess evidence of real-world exploitation.
• Maintain structured, high-quality intelligence outputs.

Skills

PoC evaluation

IOC understanding

Credibility assessment

CVE assignment & validation

JSON data handling

End-of-life data awareness

Developer tooling (VS Code)

Package ecosystems knowledge (NPM, NuG

Python scripting

Tools

VS Code

OSINT tools

NPM

NuGet

PyPI

Job description

VulnCheck is seeking a Vulnerability & Threat Intelligence Analyst who thrives on deep-dive research across diverse threat data to validate exploited vulnerabilities, active exploits, threat actors, and IOCs. This fully remote role prefers candidates in MA, MD or Greater Austin TX.

You will analyze sources, assess exploitation evidence, and produce structured, high-quality intelligence outputs to support secure development and defense of critical infrastructure.