Vulnerability Assessment Analyst (Fort Bragg, NC)

Akira Technologies Inc.; Fort Bragg (CA); On-site; USD 85,000 - 100,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Military leave

Job summary

Akira Technologies Inc. is seeking a Vulnerability Assessment Analyst to support USARC in cyberspace operations, planning and executing CDAP assessments, NAVs, NDAs, and web app testing. Onsite Fort Bragg, NC with active Secret clearance required.

You will validate vulnerabilities, coordinate with DoD partners, and produce formal reports within tight timelines while maintaining authorized tools and procedures.

Qualifications

• APTC or equivalent credential required for persistent penetration testing.
• Active Secret clearance at minimum; TS/SCI where required.
• Experience with vulnerability assessment tools (ACAS, Nessus, Burp Suite).
• Proficiency in CVSSv3 scoring and web app security testing.
• DoD ROE experience in formal assessment environments.
• Ability to identify vulnerabilities and propose remediation.
• Willingness for short-notice travel in support of mission.

Responsibilities

• Plan and execute CDAP assessment missions including NAV, NDA and web assessments.
• Coordinate with ARCYBER, RCC, ISSOs, and system admins.
• Validate compromises, collect logs, and support incident handling onsite.
• Prepare NDA and NAV reports within defined timelines.
• Maintain authorized testing tools per DISA STIG/SRG.
• Conduct annual web app assessments using approved tools.

Tools

ACAS

Nessus

Burp Suite Pro

OWASP ZAP

Metasploit

Cobalt Strike

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Vulnerability Assessment Analyst (Fort Bragg, NC)

Full Time Fort Bragg, NC, US

Salary Range: $85,000.00 To $100,000.00 Annually

Akira Technologies is seeking a Vulnerability Assessment Analyst to support the U.S. Army Reserve Command (USARC) in cyberspace operations supporting Army and joint requirements. The Vulnerability Assessment Analyst will plan and execute cybersecurity assessments under the Computer Defense Assistance Program (CDAP), including Network Assistance Visits (NAV), Network Damage Assessments (NDA), and web application assessments. The analyst will validate suspected compromises, identify vulnerabilities and intrusion depth, and recommend mitigation, recovery, and prevention actions.

This is an onsite position at Fort Bragg, NC supporting a mission-focused U.S. Army Reserve Command cyberspace operations environment. Active Secret clearance or higher is required.

Key Responsibilities

• Plan and execute CDAP integrated assessment missions, including NAV, NDA, and web assessments, in accordance with AR 380-53, applicable Rules of Engagement (ROE), and ARCYBER/RCC procedures.
• Conduct NAV activities including pre-coordination, network surveys, technical support, customized training, briefings, and final reporting.
• Respond to approved NDA requests within four hours of notification when directed; validate suspected compromises, determine intrusion scope, collect logs and forensic artifacts, and support onsite incident handling.
• Assist affected administrators with securing compromised networks and provide situational-awareness updates to leadership during active assessments.
• Coordinate assessment activities with ARCYBER, supported RCC personnel, ISSOs, mission owners, system administrators, and other stakeholders.
• Prepare formal NDA reports within five business days and NAV final reports within 30 calendar days, using approved reporting and handling procedures.
• Conduct annual web application assessments of registered public-facing websites using approved tools such as OWASP ZAP, Burp Suite Professional, Nessus Web Application Security Scanner, or successor tools.
• Analyze and validate assessment findings, including XSS, SQL injection, embedded credentials, exposed services, and other common vulnerabilities, while minimizing false positives and maximizing attack-vector coverage.
• Coordinate remediation validation and conduct 30/60/90-day retesting, based on finding severity and applicable requirements.
• Maintain authorized assessment tools in accordance with applicable DISA STIG/SRG requirements and Government-approved configurations.
• Ensure required authorization documentation, including current Letters of Authorization and APTC or equivalent credentials, is in place before conducting authorized testing against production systems.
• Maintain accurate assessment documentation, findings, evidence, remediation status, and technical reports.
• Perform other vulnerability assessment and DCO support duties as required.

Required Qualifications

• Army Penetration Testing Course (APTC) or equivalent credential required for personnel performing Persistent Penetration Testing under applicable PWS requirements.
• Active Secret security clearance at a minimum; TS/SCI eligibility/access where required by the assigned work role or supported network.
• Demonstrated experience with vulnerability assessment and web application security tools, including ACAS, Nessus, Burp Suite Professional, and/or OWASP ZAP, and exploitation frameworks such as Metasploit and Cobalt Strike.
• Proficiency in CVSSv3 scoring, vulnerability analysis, web application security testing, and network penetration-testing methodologies.
• Experience conducting cybersecurity assessments under formal Rules of Engagement (ROE) in a DoD environment.
• Experience identifying, validating, documenting, and prioritizing vulnerabilities and providing actionable remediation recommendations.
• Ability to work effectively in a classified, mission-focused environment and support operational requirements, including short-notice travel when required.

Preferred Qualifications

• Experience supporting Army, Army Reserve, ARCYBER, or joint cyberspace operations.
• Experience with CDAP, Network Assistance Visits, Network Damage Assessments, or similar DoD cybersecurity assessment programs.
• Familiarity with MITRE ATT&CK, OWASP Top 10, CVE, and CVSS.
• Experience with forensic artifact collection and compromise assessments.
• Familiarity with DISA STIGs/SRGs and DoD cybersecurity requirements.
• Relevant penetration testing, vulnerability management, or cybersecurity certifications are a plus.

Salary Range: $85,000 to $100,000

Akira’s pay range for this position considers various factors including skills, years of experience, training, licenses, certifications, alignment with market data, and internal equity in the organization. This pay range estimate is a general guideline only and not a guarantee of compensation or salary, which Akira believes to be done in good faith in compliance with local laws. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. It is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case.

Akira offers its employees multiple options for medical plans (some with Health Savings Account), dental plans, and vision coverage, and a 401(k) plan with employer match. To promote work/life balance, Akira offers paid time off, including vacation and sick time, holidays, paid parental leave, military leave, bereavement leave, and jury duty leave. We also offer short and long-term disability benefits to protect employee income in the event of sickness or injury, life insurance, accidental death and dismemberment insurance, and critical illness insurance. Akira also offers tuition, training, and certification reimbursement for professional development and career advancement.

Akira regularly reviews our total rewards package to ensure our offerings remain competitive and reflect the values and needs expressed by our employees.

Akira strives to meet and exceed the mission and objectives of US federal agencies. As a leading small business cloud modernization and data analytics services provider, we deliver trusted and highly differentiated solutions and technologies that serve the needs of our customers and citizens. Akira serves as a valued partner to essential government agencies across the intelligence, cyber, defense, civilian, and health markets. Every day, our employees deliver transformational outcomes, solving the most daunting challenges facing our customers.

Akira is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.