Vulnerability Analysis Specialist

We have an immediate opportunity for a Vulnerability Analysis Specialist to join our team supporting the National Institute of Standards and Technology (NIST). We are seeking applicants who have a deep interest in cybersecurity and a desire to make an impact to solve tough problems. Through innovative ideas and collaboration we seek to improve the security of software systems by determining critical security flaws and providing solutions to manage the vulnerability.

• Developrisk-based mitigation strategies for networks, operating systems, and applications.
• Review and define requirements for information security solutions.
• Conduct daily searches and triage vulnerabilities in online repositories (open-source, vulnerability reports, and vendors' security advisories) that contain relevant vulnerability information to identify newly listed vulnerabilities.
• Conduct regular scoring of vulnerabilities to enable triage and prioritization using Common Vulnerability Scoring System (CVSS).
• Prepare and deliver complex IT security reports that can be easily understood by executives and other stakeholders.
• Coordinate, monitor, and support activities and procedures in the vulnerability management program.

• Applicable or educational experience as a system or network administrator, software developer, or similar technical occupation
• Fundamental understanding of common computer, network, and internet technologies, including basic computer architecture and common network protocols
• Vulnerabilities and software security in general
• Vulnerability assessment and discovery
• Internet security issues including common security technology
• Software development
• Basic cryptography
• Broad communications skills, including writing, speaking, explaining complex technical issues, working with parties in conflict
• Logic and reasoning, separate evidence from opinion, decision-making under uncertainty
• Attention to detail
• Creative problem solving
• Recognize and properly handle confidential and sensitive information