ME00629-System Vulnerability Analyst 4

Momentum Engineering

  • Maryland
  • 30+ days ago

    Highlights

    This role requires experience operating in Red Team and Blue/Purple Team environments to evaluate security posture, validate defensive capabilities, and improve organizational resilience against sophisticated cyber threats. Master’s degree with 9 years of relevant experience, Bachelor’s degree with 11 years of relevant experience, Associate's degree with 13 years of in-depth relevant experience that is clearly related to the position.

    Numbers & Facts

    LocationMaryland

    Description

    Job Summary

    • Seeking an experienced System Vulnerability Analyst to support mission-critical Department of Defense (DoD) and Intelligence Community (IC) cybersecurity operations
    • The successful candidate will assess, identify, and mitigate vulnerabilities across enterprise networks, systems, and cloud environments while supporting advanced cyber defense initiatives
    • This role requires experience operating in Red Team and Blue/Purple Team environments to evaluate security posture, validate defensive capabilities, and improve organizational resilience against sophisticated cyber threats
    • The ideal candidate possesses expertise in network analysis, threat detection, vulnerability assessment, adversary tactics, and Zero Trust security principles
    • This position also requires occasional OCONUS travel in support of customer mission requirements

    Primary Responsibilities

    • Conduct vulnerability assessments and security analyses of enterprise networks, systems, and cloud environments to identify security weaknesses and recommend mitigation strategies
    • Support Red Team operations by performing adversary emulation, vulnerability validation, and security assessments to evaluate organizational defenses
    • Participate in Blue Team and Purple Team activities to improve detection capabilities, validate defensive controls, and enhance incident response procedures
    • Analyze network traffic, system logs, endpoint telemetry, and security event data to identify malicious or unauthorized activity
    • Perform network anomaly detection and investigate Indicators of Compromise (IOCs) across multiple data sources
    • Apply the MITRE ATT&CK Framework to map adversary behaviors, assess attack techniques, and improve detection and defensive strategies
    • Assess network infrastructure, architecture, and system configurations to identify opportunities for security hardening and Zero Trust implementation
    • Support cybersecurity initiatives involving Computer Network Exploitation (CNE), Computer Network Operations (CNO), and enterprise network security
    • Evaluate security controls against industry standards and best practices, including NIST Cybersecurity Framework, NIST SP 800 Series, and ISO/IEC 27001
    • Develop technical reports documenting vulnerabilities, threat assessments, security findings, and remediation recommendations
    • Collaborate with cybersecurity engineers, incident responders, system administrators, and network engineers to implement corrective actions and strengthen enterprise security
    • Support security testing, validation, and continuous monitoring activities to maintain compliance with organizational security requirements
    • Participate in OCONUS travel supporting customer cybersecurity assessments and operational requirements as needed

    Required Qualifications

    • Must have active Top Secret/SCI clearance with NSA Full Scope Polygraph
    • Master’s degree with 9 years of relevant experience, Bachelor’s degree with 11 years of relevant experience, Associate's degree with 13 years of in-depth relevant experience that is clearly related to the position
    • Experience supporting cybersecurity operations on programs of similar scope and complexity
    • Demonstrated experience conducting Red Team operations
    • Experience supporting Blue Team or Purple Team cybersecurity activities
    • Experience performing network analysis, network anomaly detection, and threat hunting
    • Experience identifying and analyzing Indicators of Compromise (IOCs)
    • Strong understanding of the MITRE ATT&CK Framework and adversary tactics, techniques, and procedures (TTPs)
    • Knowledge of NIST cybersecurity standards and ISO/IEC 27001 security frameworks
    • Experience analyzing security events, network traffic, system logs, and endpoint telemetry
    • Strong analytical, troubleshooting, and problem-solving skills
    • Willingness and ability to travel OCONUS as required

    Desired Qualifications

    • Experience supporting Zero Trust Architecture (ZTA) initiatives
    • Experience with Computer Network Exploitation (CNE) and Computer Network Operations (CNO)
    • Experience assessing and hardening enterprise network infrastructure and system architectures
    • Experience performing penetration testing or offensive security assessments
    • Experience utilizing vulnerability assessment and security testing tools
    • Experience with Security Information and Event Management (SIEM) platforms such as Splunk, Microsoft Sentinel, or Elastic
    • Familiarity with Python scripting for automation, analysis, or tool development
    • Experience with endpoint detection and response (EDR) platforms and threat intelligence solutions
    • Experience supporting Department of Defense or Intelligence Community cybersecurity missions

    Exempt hourly position. 11 paid holidays, minimum of 3 weeks PTO, company sponsored group medical plan, company paid dental, vision, life insurance, and STD/LTD plans. Salary is dependent upon the candidate’s experience and qualifications.

    Similar Jobs