Vulnerability Assessment Analyst

Strategic Operational Solutions, Inc; Fort Bragg (NC); On-site; USD 85,000 - 120,000; Full time

Job summary

Strategic Operational Solutions, doing business as STOPSO, seeks a Vulnerability Assessment Analyst to support USARC at Fort Bragg. You will assess systems, networks, and web apps, validate remediation, and document findings to reduce risk.

Requires DoD qualification and active SECRET clearance with on-site work in a secure government facility. Responsibilities include conducting authorized testing within scope, applying CVSS v3, and coordinating with stakeholders.

Qualifications

• 3 years of relevant vulnerability and testing experience.
• DCWF 541 Intermediate qualification required; government mapping applies.
• Must meet DoD 8140.03 requirements before independent cyber work.

Responsibilities

• Conduct vulnerability, network, and web app assessments using approved tools.
• Analyze configurations, scans, exploitability; apply CVSS v3 for prioritization.
• Document assets, evidence, risk, remediation, and retest results clearly.

Skills

Vulnerability testing

Web testing

Network testing

CVSS v3

Documentation

Security clearance

Education

DoD Cyber Workforce Framework 541 Intermediate

Army Penetration Testing Course

Security+ / CEH / equivalent

Tools

ACAS

Burp Suite

Wireshark

Kali Linux

Windows

Job description

Position Summary

Strategic Operational Solutions (STOPSO) is seeking a Vulnerability Assessment Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Assess systems, networks, and web applications for vulnerabilities and validate corrective actions. The analyst conducts authorized testing within approved scope and documents findings that support risk reduction.

Essential Duties and Responsibilities

• Conduct vulnerability, network, and web application assessments using approved tools and rules of engagement.
• Analyze configurations, scan results, exploitability, and operational context; apply CVSS v3 to help prioritize findings.
• Document affected assets, evidence, risk, recommended remediation, and retest results in clear assessment products.
• Support Network Assistance Visits, Network Damage Assessments, and integrated assessments as assigned.
• Validate asserted remediation and track closure according to severity and program reporting requirements.
• Execute Persistent Penetration Testing only after required Army Penetration Testing Course completion and authorization.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Required Qualifications

Education and Experience

• Minimum 3 years of documented relevant experience. Relevant vulnerability and web or network assessment experience, CVSS v3 proficiency, and ability to document and validate findings.
• DoD Cyber Workforce Framework (DCWF) Vulnerability Assessment Analyst, Intermediate proficiency. The current qualification matrix identifies this work role as 541; appointment will follow the Government-approved role mapping.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 541 Intermediate: CEH(P), CPTE, Cloud+, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, RCCE Level 1, Security+.
• Completion of the Army Penetration Testing Course is required before executing Persistent Penetration Testing.

Knowledge, Skills and Abilities

• Demonstrated knowledge of Vulnerability assessment, web application and network testing, CVSS v3, evidence handling, remediation validation, and rules of engagement.
• Proficiency with ACAS, Burp Suite, approved scanning and assessment platforms, Wireshark, Windows, and Kali Linux appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Preferred Qualifications

• Experience with authorized DoD assessment missions and remediation retesting.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Security Clearance

Active SECRET clearance and ability to maintain assigned system access. U.S. citizenship is required.

Supervisory Responsibilities

No formal supervisory responsibilities.

Work Environment and Physical Requirements

Work is primarily performed on site in a secure Government facility using computer systems and standard office equipment. The employee must be able to perform sustained computer-based analysis or coordination, communicate effectively, and support operational activities outside standard business hours when assigned. Mission-essential watch roles may include shifts, weekends, and holidays.

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

Travel

Occasional local, CONUS, or OCONUS travel may be required for authorized mission activities, exercises, assessments, or conferences.

Equal Employment Opportunity

STOPSO is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law.