Vulnerability Analyst

VetJobs; Oak Ridge (TN); On-site; USD 90,000 - 130,000; Full time

Job summary

VetJobs seeks a Vulnerability Analyst to analyze data streams, interpret threats and vulnerabilities, and recommend mitigations to protect enterprise assets. You will support cyber analysis for exception requests and contribute to system and application designs with emphasis on security architectures and compliance.

The role covers a wide range of cybersecurity areas, including networks, firewalls, encryption, reporting, and regulatory compliance.

Qualifications

• Bachelor’s degree in engineering, science, IT or related field.
• Master’s degree in engineering, science, IT or related field preferred.
• 8+ years of education and/or relevant experience for higher levels.
• Knowledge of networking, security threats, and risk management.
• Experience with penetration testing and social engineering.
• Familiarity with Unix/Linux, iOS, Android and Windows.
• Strong analytical, problem-solving and communication skills.

Responsibilities

• Analyze data streams to identify threats, vulnerabilities, impacts and likelihood of asset exposure.
• Provide mitigations and remediation recommendations for exploitable assets.
• Assist Vulnerability and Compliance Assessment Management with cyber analysis for exception requests.
• Review system architectures, firewalls, encryption components, networking and security reporting.
• Detect intrusions and mimic threat behaviors to support testing tools and techniques.
• Maintain knowledge of cyber defense policies, regulations, and compliance documents.

Skills

Analytical thinking

Problem solving

Communication

Education

Bachelor's degree

Master's degree preferred

Tools

Intrusion detection systems

Job description

Job Title: Vulnerability Analyst

Location: Oak Ridge, TN

What You'll Do

The Vulnerability Analyst is responsible for analyzing key data streams and interpreting threats, vulnerabilities, impacts, and likelihood of asset exposure. The aggregation of ingested data informs analysis with key identifiers to generate a holistic view of the enterprise and provide recommended mitigations and/or remediation of possible exploitable assets.

The analyst also assists Vulnerability and Compliance Assessment Management with cyber analysis to support exception requests and provides recommendations for enterprise‑level system and application designs. This role involves a wide range of cybersecurity areas, including system architectures, firewalls, inspection and analysis tools, encryption components, networking architectures, security reporting, and analysis to regulatory agencies.

• Identify systemic security issues based on the analysis of vulnerability and configuration data.
• Share meaningful insights about the organization’s threat environment that improve risk management posture.
• Apply cybersecurity and privacy principles to organizational requirements.
• Implement host/network access control mechanisms.
• Conduct vulnerability scans and recognize vulnerabilities in security systems.
• Assess the robustness of security systems and designs.
• Detect host and network‑based intrusions via intrusion detection technologies.
• Mimic threat behaviors and support penetration testing tools and techniques.
• Use social engineering techniques such as phishing and baiting.
• Support network analysis tools to identify vulnerabilities.
• Review logs to identify evidence of past intrusions.
• Conduct application vulnerability assessments and perform impact/risk assessments.
• Develop insights into the organization’s threat environment.
• Analyze cyber defense policies and configurations and evaluate compliance with regulations.
• Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents.

Qualifications

• Bachelor’s degree in engineering, science, information technology, or related discipline.
• Master’s degree in engineering, science, information technology, or related discipline is preferred.
• Eight or more years of education and/or relevant experience considered for higher career levels.
• Knowledge of computer networking, network security methodologies, laws, regulations, and cybersecurity threats.
• Knowledge of risk management processes, cryptography, application and system vulnerabilities, and network access management.
• Experience with penetration testing, social engineering, and intrusion detection systems.
• Familiarity with operating systems such as Unix/Linux, IOS, Android, and Windows.
• Strong analytical, problem‑solving, and communication skills.

Clearance Requirements

• Requires a Q clearance; all qualified candidates are considered regardless of current clearance status.
• Candidates may be asked to obtain and maintain a Department of Energy Q clearance.
• Position may require entry into Material Access Areas and participation in counterintelligence evaluations.

What You Can Expect

• Meaningful work supporting missions vital to national and global security.
• Collaboration with dedicated colleagues.
• Competitive pay and benefits, including medical, vision, dental, prescription drug plans, 401(k) match, disability coverage, and education reimbursement.
• Career advancement and professional development programs.
• Work‑life balance through flexible work options and wellness initiatives.