Vulnerability Triage

Vulnerability Triage Cybersecurity Jobs

3 jobs found

1mo ago

Cybersecurity Vulnerability Management Lead

Cherokee Federal Almont, CO

Almont, CO

1mo ago Closed

Full time Manager Application Security Cloud Platforms

This position is no longer accepting applications (closed Sep 18, 2026).

Job Description

Cherokee Federal is seeking a Cybersecurity Vulnerability Management Team Lead to support the NSF Cybersecurity Program. This onsite role in Almont, CO provides technical authority to modernize vulnerability management into a threat-informed exposure management capability and to lead enterprise vulnerability operations.

Key Responsibilities

Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments.
Provide technical leadership to a team of vulnerability analysts and establish a culture of accountability, ownership, collaboration, and continuous improvement.
Develop and maintain a vulnerability management roadmap aligned with evolving threats and organizational priorities.
Operationalize modern vulnerability prioritization techniques using CISA Known Exploited Vulnerabilities (KEV), EPSS, threat intelligence feeds, asset criticality scoring, internet-facing asset identification, attack path analysis, and MITRE ATT&CK mapping.
Evaluate and recommend emerging technologies to improve vulnerability validation, attack surface visibility, and exposure management.
Own end-to-end vulnerability management processes: Discovery, Validation, Prioritization, Remediation coordination, Exception handling, Verification, and Executive reporting.
Operate and optimize enterprise scanning platforms, including Tenable.sc, Tenable.io, and Nessus.
Improve scan coverage, credential management, accuracy, and false-positive reduction.
Integrate findings from cloud-native security capabilities: AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud.
Partner with Application Security and DevSecOps teams to support AppScan, DAST, SAST, CI/CD integrations, and container image scanning.
Mature ServiceNow Vulnerability Response capabilities, including CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows.
Develop automation opportunities using APIs, Python, PowerShell, and orchestration capabilities.
Build executive dashboards and metrics including MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness.
Brief cybersecurity leadership on emerging risks, remediation progress, and program maturity initiatives.

Required Qualifications

8+ years of cybersecurity experience.
4+ years of direct vulnerability management experience in a federal or large enterprise environment.
3+ years leading vulnerability analysts, remediation programs, or enterprise VM initiatives.
Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus.
Experience implementing or significantly improving a vulnerability management or exposure management capability.
Experience with ServiceNow Vulnerability Response and CMDB integrations.
Experience applying modern vulnerability prioritization methodologies including CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis.
Experience supporting AWS, Azure, or hybrid cloud environments.
Experience collaborating with Security Operations and Incident Response teams to identify and rapidly remediate actively exploited vulnerabilities.
Experience briefing technical teams, executives, and federal stakeholders.

Technologies

Tenable.sc, Tenable.io, Nessus
CISA Known Exploited Vulnerabilities (KEV), EPSS, Threat intelligence feeds, MITRE ATT&CK
AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, Microsoft Defender for Cloud
AppScan, DAST, SAST, CI/CD integrations, Container image scanning
ServiceNow Vulnerability Response, CMDB enrichment, APIs, Python, PowerShell, orchestration capabilities
ServiceNow Vulnerability Response and CMDB integrations

Highly Desired Experience

SafeBreach
AttackIQ
Pentera
XM Cyber
Wiz
Prisma Cloud
AppScan
Breach and Attack Simulation (BAS)
Continuous Control Validation (CCV)
External Attack Surface Management (EASM)
Kubernetes Security
Detection Engineering

Preferred Certifications

CISSP
GCIH
CySA+
Security+
Tenable Certified Professional
AWS Security Specialty
ServiceNow Vulnerability Response Certification

View full job page →

1mo ago

Cybersecurity Vulnerability Analyst

Peraton Linthicum, MD

Linthicum, MD

1mo ago Closed

$104k - $166k/yr Full time Cybersecurity Tools Information Security InfoSec

This position is no longer accepting applications (closed Sep 14, 2026).

Job Description

Peraton is seeking a Cybersecurity Vulnerability Analyst to support a DoD Vulnerability Disclosure Program in the Baltimore-Metropolitan area. This fully on-site role (M-F) focuses on reviewing incoming vulnerability reports, validating findings, and coordinating mitigation through the established DoD workflow.

Role Responsibilities

Review and vet security vulnerability reports submitted to the DoD VDP from external hackers.
Evaluate reports to confirm the vulnerability is reproducible and meaningful to the customer.
Assess each vulnerability for severity and assign an associated risk statement.
Use the HackerOne Triage console tool to assist with triage, assigning, and prioritizing reports.
Identify and flag duplicate submissions using the HackerOne Triage console tool.
Produce vulnerability reports in a DoD approved format and send them to the Vulnerability Management Analyst team to enable system owner coordination and mitigation.
Act as a VDP liaison with the hacker community.
Utilize offensive toolsets such as Kali Linux to safely analyze production networks and systems, documenting procedures to create usable vulnerability assessments.
Identify and investigate vulnerabilities, assess exploit potential, and document findings and remedies to support customer mitigations.
Conduct web application vulnerability assessment testing using automated tooling and manual web exploitation techniques, including Burp Suite and open-source toolsets.
Run automated scans against systems and applications using a range of industry-standard security tools.
Develop and execute proof-of-concept exploits to demonstrate real-world impact using multiple web exploitation methods.

Required Qualifications

Bachelor’s degree and 5+ years of experience, or Master’s and 3+ years, or PhD and 0+ years.
Active Secret clearance.
Active IAT Level II certification (CompTIA Security+ preferred).
In-depth understanding of information security principles and practices.
Pentesting experience.
Ability to use MITRE ATT&CK, CVSS, and NIST frameworks to assess vulnerability severity and risk impact.
In-depth understanding of web exploitation concepts and techniques.
Knowledge of the OWASP Top 10.
Experience operating in a professional IT or cybersecurity environment.
Experience investigating security events, threats, and/or vulnerabilities.
Understand information security principles, technologies, and practices.
Excellent customer service skills.

Preferred Education

Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, Software Engineering, or Data Science is highly desired.

Security Tools and Technologies

HackerOne Triage console tool
Kali Linux
Burp Suite
MITRE ATT&CK
CVSS
NIST
OWASP Top 10
PowerShell
Bash
Python
Perl
CompTIA Security+
CEH
CCNA-Security
CySA+
OSCP
PenTest+
HTLM/CSS
SQL

Location and Schedule

Location: Linthicum, MD (fully on-site).
Schedule: M-F in the Baltimore-Metropolitan area.

Compensation

Salary range: USD 104,000 to 166,000 per year.
Target salary range: $104,000 - $166,000.

Benefits

Medical
Dental
Vision
Life
Health savings account
Short/long term disability
EAP
Parental leave
401(k)
Paid time off (PTO) for vacation
Company paid holidays

Application and Additional Information

Application period is estimated to be 30 days from the job posting date, and the timeline may be shortened or extended based on business needs and candidate availability.
During review, applicants may be required to participate in an on-camera interview and a process to verify identity.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

View full job page →

1mo ago

Offensive Security Analyst

Sprocket Security Madison, WI

Madison, WI

1mo ago Closed

Full time Application Security Cybersecurity Tools Dynamic Application Security Testing

This position is no longer accepting applications (closed Sep 3, 2026).

Job Description

Sprocket Security is seeking an Offensive Security Analyst to act as the human judgment layer in an offensive automation pipeline for client-ready results.

Responsibilities

Triage, validate, and QA findings surfaced by Sprocket’s automation workflow
Reproduce and confirm true positives while eliminating false positives before results reach a client
Author and refine findings to client-ready quality, maintaining the Sprocket voice, then publish through the platform
Calibrate severity to real business impact using Sprocket standards, prioritizing practical impact over theoretical risk
Handle roughly 90% of findings independently, making accurate handle-versus-escalate decisions using platform workflow
Escalate the hard 10% to an Adversarial Engineer with full context attached
Provide pattern-level feedback to R&D and the Adversarial Engineering team to tune attack automations and reduce false positives
Log validation notes, flag false-positive patterns, and contribute to the knowledge base
Script away repetitive validation tasks wherever they appear
Collaborate with R&D and the Service Delivery team to improve the automation feedback loop and client experience
After triage is complete and capacity allows, help programmatically enhance the automation pipeline with new or updated capabilities, pairing with an Adversarial Engineer as needed
Attend daily standups, weekly 1:1s, monthly company calls, and all-hands

Requirements

Demonstrated experience triaging or reproducing vulnerabilities surfaced by a security tool (vulnerability scanner, SAST/DAST/SCA/IAST, or similar automation) in a professional setting
Some software programming experience, with Python preferred
Exposure to using Generative AI tools for day-to-day tasks, with Claude preferred
Strong Development, IT, or Infosec foundation plus genuine self-directed security study
Hands-on validation depth across common vulnerability classes, including OWASP Top 10, network, and authentication issues
Clear, detail-oriented written communication that remains effective under volume
Self-direction to manage a high-volume queue independently without hourly guidance

Technologies

Python
Claude
Generative AI
SAST
DAST
SCA
IAST
OWASP Top 10
Vulnerability scanner

Benefits

Unlimited and mandatory PTO for healthy work/life balance
Company matched 401k with immediate eligibility
75% company contribution for health insurance for employees and 50% for dependents
100% company contribution for dental and vision
Flexible working hours
Hardware and tools of your choice
Paid training, conferences, and certifications to support career development

Mission and Product Context

Company mission: help secure as many companies as possible by prioritizing penetration testing
Emphasis: offensive security for enterprises, building robust defense strategies based on individual business risk
Platform approach: an expert-driven Continuous Penetration Testing platform combining automated and manual testing
Your role: the human judgment layer who decides what is real, calibrates severity, and ensures findings read in the Sprocket voice before client delivery

Preferred

Security+, eJPT, CPTS, PNPT, or similar foundational credential
CTF achievements (HackTheBox, TryHackMe, PortSwigger Academy)
Degree in computer science, engineering, or IT
Interest in working toward OSCP or an equivalent hands-on certification over time

Location: Madison, WI (onsite)

View full job page →

Vulnerability Triage Cybersecurity Jobs

Cybersecurity Vulnerability Management Lead

Cybersecurity Vulnerability Analyst

Offensive Security Analyst

Get Vulnerability Triage Cybersecurity Jobs alerts