Vulnerability Triage & Security Analyst

Booz Allen Hamilton; Linthicum (MD); On-site; USD 62,000 - 141,000; Full time

Job summary

Booz Allen Hamilton in Linthicum, MD is seeking a cybersecurity vulnerability analyst to support the DoD Vulnerability Disclosure Program (VDP). You will review and validate vulnerability reports, determine severity, and coordinate mitigations with system owners.

Using Kali Linux, Burp Suite and related tools, you will perform web application testing, document findings, and communicate risk clearly to stakeholders. A Security+ or equivalent is preferred; a clearance is required.

Qualifications

• Experience in professional IT or cybersecurity environments.
• Knowledge of OWASP Top 10 and vulnerability assessment concepts.
• Ability to document findings with clear risk context.

Responsibilities

• Review and vet vulnerability reports for DoD VDP.
• Assess severity and reproduce the vulnerability for validation.
• Use HackerOne/HackerOne Triage and DoD formats for reporting.
• Coordinate with system owners to mitigate vulnerabilities.
• Liaise with hacker community as VDP representative.

Skills

Cybersecurity

Vulnerability assessment

Web exploitation

Education

Bachelor’s degree in IT or related field

DoD 8570/Certifications (e.g., Security+)

Tools

Kali Linux

Burp Suite

Job description

Booz Allen Hamilton in Linthicum, MD is seeking a cybersecurity vulnerability analyst to support the DoD Vulnerability Disclosure Program (VDP). You will review and validate vulnerability reports, determine severity, and coordinate mitigations with system owners.

Using Kali Linux, Burp Suite and related tools, you will perform web application testing, document findings, and communicate risk clearly to stakeholders. A Security+ or equivalent is preferred; a clearance is required.