Cybersecurity Vulnerability Analyst

Cybersecurity Vulnerability Analyst Location: Arlington, VA Must have an active Top Secret Security Clearance Node is supporting a U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders. Node is seeking a Cybersecurity Vulnerability Analyst to support this critical customer mission. Responsibilities: u2022 Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures u2022 Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools u2022 Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities u2022 Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components u2022 Evaluate technical requirements of VM operational components and recommend paths forward u2022 Understand and articulate the impact of vulnerabilities to organizations u2022 Coordinate with VM analysts and leadership to synchronize VM operational activities u2022 Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities u2022 Willingness, ability, and flexibility to assist the government to standup this new mission operations area within VM u2022 Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required u2022 Demonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports Requirements Required Skills: u2022 U.S. Citizenship u2022 Must have an active TS/SCI clearance u2022 Must be able to obtain DHS Suitability u2022 5+ years of directly relevant experience u2022 Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required u2022 Experience with the analysis and characterization of cyber attacks u2022 Skilled in identifying different classes of attacks and attack stages u2022 Knowledge of system and application security threats and vulnerabilities u2022 Knowledge of basic networking protocols, including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS, and open security standards and projects, including OWASP u2022 Knowledge of CVSS and KEV scoring methodology u2022 Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.) u2022 Knowledge of VM scanning, Web Application scanning, and red team processes u2022 Experience recognizing and categorizing types of vulnerabilities and associated attacks u2022 Knowledge of Computer Network Defense policies, procedures, and regulations u2022 Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored]) u2022 Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code) u2022 Experience in developing and delivering technical briefings u2022 Must be able to work collaboratively across physical and virtual locations Desired Skills: u2022 Understanding of OT/ICS/SCADA technologies and associated vulnerabilities u2022 Experience with conducting all-source research u2022 Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK) u2022 Experience with: o SharePoint o ServiceNow o Palo Alto Networks Cortex Xpanse Required Experience Education: BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 7+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma. Desired Certifications: u2022 CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS Company Overview: Node.Digital is an independent Digital Automation & Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact. Our Core Values help us in our mission. They include: OUR CORE VALUES Identifying the~RIGHT PEOPLE~and developing them to their full capabilities Our customeru2019s u201cMissionu201d is our u201cMissionu201d. Our~MISSION FIRST~approach is designed to keep our customers fully engaged while becoming their trusted partner We believe in~SIMPLIFYING~complex problems with a relentless focus on agile delivery excellence Our mantra is u201c~SimpleSecureSpeed~u201d in delivery of innovative services and solutions Benefits We are proud to offer competitive compensation and benefits packages to include + Medical + Dental + Vision + Basic Life + Health Saving Account + 401K + Three weeks of PTO + 10 Paid Holidays + Pre-Approved Online Training

Created: 2025-12-05