Cybersecurity Vulnerability Analyst
Cybersecurity Vulnerability Analyst
Posted on :
11-09-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Monthly Salary
Not Disclosed
Salary Not Disclosed
Vacancy
1 Vacancy
Posted on :
11-09-2025
Job Description
Our Partner is supporting a US Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices risk management techniques critical thinking and strong analytical skills to analyze information from multiple sources synthesize that information and provide expert analysis to senior customer stakeholders.
Responsibilities
About Us
For more than 20 years NewGen Technologies has solved our clients toughest IT challenges with integrity security and outstanding service by delivering both technology and talent. We have helped secure borders have used artificial intelligence (AI) to fight terror aided the identification of criminals and have helped to prevent crime through the introduction of team of Highly Cleared Specialists have hard-to-find skills and expertise in a wide spectrum of technologies to provide solutions that transform business processes and solve problems of national significance. #CJ
Responsibilities
- Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures
- Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools
- Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities
- Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components
- Evaluate technical requirements of VM operational components and recommend paths forward
- Understand and articulate the impact of vulnerabilities to organizations
- Coordinate with VM analysts and leadership to synchronize VM operational activities
- Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities
- Willingness ability and flexibility to assist the government to standup this new mission operations area within VM
- Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required
- Demonstrated ability to contribute to weekly operation summaries intelligence analysis summaries and other cyber intelligence reports
- US Citizenship; TS/SCI Clearance
- Must be able to obtain DHS Suitability
- BS Computer Science Computer Engineering Computer Information Systems Cybersecurity or related degree or 7 years experience in cyber incident management experience or cybersecurity experience with a High school diploma
- 5 years of directly relevant experience
- Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required
- Experience with the analysis and characterization of cyber attacks
- Skilled in identifying different classes of attacks and attack stages
- Knowledge of system and application security threats and vulnerabilities
- Knowledge of basic networking protocols including TCP/IP UDP HTTP/HTTPS SSH and DNS and open security standards and projects including OWASP
- Knowledge of CVSS and KEV scoring methodology
- Knowledge of general attack stages (e.g. foot printing and scanning enumeration gaining access escalation of privileges maintaining access network exploitation covering tracks etc.)
- Knowledge of VM scanning Web Application scanning and red team processes
- Experience recognizing and categorizing types of vulnerabilities and associated attacks
- Knowledge of Computer Network Defense policies procedures and regulations
- Knowledge of different operational threat environments (e.g. first generation script kiddies second generation non nation-state sponsored and third generation nation-state sponsored)
- Knowledge of system and application security threats and vulnerabilities (e.g. buffer overflow mobile code cross-site scripting PL/SQL and injections race conditions covert channel replay return-oriented attacks and malicious code)
- Experience in developing and delivering technical briefings
- Must be able to work collaboratively across physical and virtual locations
- Understanding of OT/ICS/SCADA technologies and associated vulnerabilities
- Experience with conducting all-source research
- Understanding of MITRE Adversary Tactics Techniques and Common Knowledge (ATT&CK)
- Experience with:
- SharePoint
- ServiceNow
- Palo Alto Networks Cortex Xpanse
- Certifications:CompTIA Security CEH CISSP CISM CISA CCSP CIPP CPT CCSS
About Us
For more than 20 years NewGen Technologies has solved our clients toughest IT challenges with integrity security and outstanding service by delivering both technology and talent. We have helped secure borders have used artificial intelligence (AI) to fight terror aided the identification of criminals and have helped to prevent crime through the introduction of team of Highly Cleared Specialists have hard-to-find skills and expertise in a wide spectrum of technologies to provide solutions that transform business processes and solve problems of national significance. #CJ
Required Experience:
IC
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
