Mitre Att&ck

Mitre Att&ck Cybersecurity Jobs

3 jobs found

1d ago

Senior Security Consultant (Web Application Penetration Tester)

NetSPI LLC Minneapolis, MN

Minneapolis, MN

1d ago

Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

NetSPI offers an on-site opportunity in Minneapolis, MN for a Senior Security Consultant focused on web application and API security testing. This role centers on hands-on assessments, delivering actionable reports, and advancing security best practices across diverse client environments. You will collaborate with experienced teams, mentor colleagues, and contribute to the ongoing evolution of NetSPI’s tools and methodologies. The culture emphasizes thoughtful collaboration, continuous learning, and meaningful impact on client security outcomes. The position requires an 8-hour workday with occasional evenings or weekends to meet project deadlines, and a travel footprint of up to 5-10% as needed.

Responsibilities

Conduct engagements on web applications and underlying APIs independently and provide technical oversight
Review reports for accuracy in technical oversight, perform weekly QA oversight, and provide mentoring support to others
Create, deliver, and collaborate on penetration testing reports in diverse client environments, maintaining client-specific processes, reporting standards, and access protocols to help improve their security posture
Research and develop innovative techniques, tools, and methodologies for penetration testing services, alongside commitment to improvement and execution on NetSPI specific products and processes
Participate in development, implementation, and oversight of testing, delivery, and management strategies for key client accounts
Perform administrative tasks related to day-to-day consulting activities to ensure smooth business and engagement operations

Minimum Qualifications

Bachelor’s degree or higher, with a focus on IT, Computer Science, Engineering or Math or equivalent experience
Minimum of 3-5 years of work experience in Penetration Testing
Familiarity with offensive tools based on applicable skillset (for example Kali Linux, Burp Suite, Metasploit, Nessus)
Familiarity with offensive and defensive IT concepts and protocols
Extensive understanding of the OWASP Top 10, MITRE ATT&CK framework, and various security frameworks
Working knowledge of Windows, Linux and MacOS operating systems internals
Experience mentoring or coaching to growing team members, while sharing knowledge externally through blogs, hosting webinars, or presenting at conferences
Ability to work independently and as part of a team
Proficient communication skills, both written and verbal
Willingness to travel up to 5-10%
This position requires an 8-hour workday, with occasional evenings or weekends necessary to meet project deadlines or critical needs

Preferred Qualifications

Ability to provide technical and QA oversight on web applications and underlying APIs
Experience in one or more of the following programming or scripting languages: Ruby, Python, Perl, C, C++, Java, and C#
Offensive cybersecurity certifications such as GXPN, GPEN, OSCP, GWAPT

Technologies

Kali Linux
Burp Suite
Metasploit
Nessus
Windows
Linux
MacOS
Ruby
Python
Perl
C
C++
Java
C#
OWASP Top 10
MITRE ATT&CK framework

View full job page →

1mo ago

Cybersecurity Vulnerability Analyst

Peraton Linthicum, MD

Linthicum, MD

1mo ago Closed

$104k - $166k/yr Full time Application Security Computer Skills Cvss Score

This position is no longer accepting applications (closed Jul 10, 2026).

Job Description

Peraton is seeking a Cybersecurity Vulnerability Analyst to support the DoD Vulnerability Disclosure Program from an onsite post in Linthicum, Maryland. The role centers on reviewing vulnerability reports submitted by external researchers, confirming reproducibility, and coordinating mitigations with the Vulnerability Management team for DoD assets in the Baltimore area. The position offers a salary range of $104,000 to $166,000 per year and requires a PhD.

Responsibilities

Review and validate vulnerability reports submitted to the DoD VDP by external researchers.
Assess reports for reproducibility to establish value for the customer.
Determine vulnerability severity and assign a corresponding risk rating.
Use the HackerOne Triage console to triage, prioritize, and detect duplicate submissions.
Prepare reports in the DoD approved format and forward to the Vulnerability Management Analyst team to coordinate with system owners for mitigation.
Serve as the DoD VDP liaison with the hacker community.
Apply offensive toolsets including Kali Linux to safely analyze production networks and systems, documenting steps to produce actionable vulnerability assessments.
Identify and investigate vulnerabilities, assess exploit potential, and document findings and remedies to support mitigations on customer environments.
Perform web application vulnerability assessments using automated tools and manual techniques with Burp Suite and open-source toolsets.
Use standard security tools to conduct automated scans across systems and applications.
Develop and demonstrate proof-of-concept exploits to illustrate real-world impact using various web exploitation methods.

Requirements

Education: PhD required; alternative pathways include a Bachelor’s degree with 5+ years of experience, or a Master’s with 3+ years, or PhD with 0+ years. Degrees in Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science; plus 4 additional years of relevant experience or specialized training may be considered in lieu of a Bachelor’s degree.
Security Clearance: Active Secret clearance.
Certifications: Active IAT Level II certification (CompTIA Security+ preferred).
In-depth understanding of information security principles and practices.
Pentesting experience.
Ability to apply MITRE ATT&CK, CVSS, and NIST frameworks to assess vulnerability severity and risk impact.
In-depth understanding of web exploitation concepts and techniques.
Knowledge of the OWASP Top 10.
Experience operating in a professional IT or cybersecurity environment.
Experience investigating security events, threats, and vulnerabilities.
Understand information security principles, technologies, and practices.
Excellent customer service skills.

Technologies

Kali Linux
HackerOne Triage
Burp Suite
HTML
CSS
SQL
PowerShell
Bash
Python
Perl
Hack The Box
MITRE ATT&CK
CVSS
NIST frameworks
OWASP Top 10

Benefits

Medical
Dental
Vision
Life insurance
Health savings account
Short-term disability
Long-term disability
Employee Assistance Program (EAP)
Parental leave
401(k)
Paid time off (PTO) for vacation
Company paid holidays

View full job page →

1mo ago

Global Cybersecurity Senior Analyst

Boston Consulting Group Atlanta, GA

Atlanta, GA

1mo ago Closed

$98k - $121k/yr Full time Cloud Platforms Cybersecurity Tools Endpoint Security

This position is no longer accepting applications (closed Jul 4, 2026).

Job Description

Boston Consulting Group offers a collaborative, global culture and a comprehensive benefits package. This onsite role in Atlanta places you on the Cyber Security Incident Response Team, working across BCG's worldwide environment to detect, triage, investigate, and respond to cyber threats. Benefits include health coverage with $0 premiums for employees, spouses, and children, low copays for doctor visits and urgent care, dental and vision coverage, gym reimbursements, a fully vested profit-sharing retirement plan, generous parental leave and family benefits, and substantial paid time off.

Responsibilities

Investigate and respond to cyber security incidents, including phishing, malware, unauthorized access, and suspicious activity.
Perform structured triage, analysis, and containment actions in alignment with CSIRT procedures.
Monitor and analyze alerts from SIEM, EDR, and other security tools.
Conduct log analysis across endpoints, network, and cloud environments to identify indicators of compromise.
Document investigations clearly and accurately, ensuring all actions and findings are consistently recorded.
Support incident response activities across time zones, including shift handoffs and coordination.
Contribute to continuous improvement of response processes and post-incident reviews.
Follow and apply frameworks such as MITRE ATT&CK, SANS incident handling, and internal playbooks.
Escalate issues appropriately and provide relevant context for decision-making.
Identify patterns, trends, and recurring issues, and share insights with the team.
Support development and refinement of standard operating procedures and playbooks.

Requirements

Bachelor’s degree (or equivalent) in Cybersecurity, Computer Science, Information Security, or related field
Three to five years of professional experience, including at least two years in cyber security or security operations
Incident response or SOC operations
SIEM platforms (eg Splunk or similar)
EDR tools (eg CrowdStrike, Microsoft Defender, or similar)
Log analysis and investigation
MITRE ATT&CK framework
NIST Cybersecurity Framework
Basic regulatory concepts (e.g., GDPR)
Experience working in a global or distributed team environment
Strong written and verbal communication skills in English

Technologies

Splunk
CrowdStrike
Microsoft Defender
MITRE ATT&CK
NIST Cybersecurity Framework

Benefits

Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
Dental coverage, including up to $5,000 in orthodontia benefits
Vision insurance with coverage for both glasses and contact lenses annually
Reimbursement for gym memberships and other fitness activities
Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
Paid sick time on an as needed basis

Additional Info

The base salary range for this role in Atlanta is $98,000 - $120,700.

View full job page →

Mitre Att&ck Cybersecurity Jobs

Senior Security Consultant (Web Application Penetration Tester)

Cybersecurity Vulnerability Analyst

Global Cybersecurity Senior Analyst

Get Mitre Att&ck Cybersecurity Jobs alerts