Senior Vulnerability Analyst (US)

VulnCheck

Location

MA / Austin TX / MD

Posted

2 months ago

Department

Research

What they actually want (must-haves)

2+ years of coordinated vulnerability disclosure (CVD) experience at a PSIRT, government agency, researcher or bug bounty CNA, or other coordinating body in the vulnerability disclosure ecosystem
Prior experience writing, reviewing, and updating CVE records; familiarity with CVE record structure and tooling (e.g., CVE services, Vulnogram)
Prior experience analyzing unstructured vulnerability reports and product documentation to determine whether reported issues cross security boundaries and demonstrate sufficient impact to confidentiality, integrity, and availability
Prior experience reporting and coordinating vulnerability reports with third-party organizations, including commercial and open-source projects and products
Exceptionally strong written and verbal communication skills
Knowledge of MITRE ATT&CK, CAPEC, and CWE, and working experience mapping vulnerability reports to these frameworks

Nice to have

Experience engaging with community initiatives, standards bodies, or open-source projects in the vulnerability or threat intelligence space
Familiarity with automation tools or programming/scripting languages (Python, Golang, etc.) for data enrichment or workflow improvement
Published research, whitepapers, or presentations in the field of vulnerability analysis, mapping, or threat intelligence

What the job really is

As a Senior Vulnerability Analyst at VulnCheck, you will be responsible for assessing and validating vulnerability reports, coordinating disclosures with software suppliers and researchers, and populating CVE metadata. Your role will involve developing workflows for vulnerability triage and sharing your expertise with internal teams and the broader community. This position is fully remote, with a preference for candidates in specific locations.

Benefits

Unlimited PTO
401k plan with company match
Comprehensive healthcare coverage
Generous paid parental leave
Remote friendly environment with flexibility
Expense reimbursement for Cell Phone & Internet

Things to weigh

No salary listed
The role involves significant communication and coordination, which may require strong interpersonal skills and adaptability to different audiences.
The position may involve access to technology subject to U.S. export control regulations, which could impact employment eligibility.

Job score2.6/5

Benefits4/5

Freshness1/5

Career value4/5

Role clarity4/5

Pay transparency0/5

Applying to VulnCheck?

See how your résumé matches this role — and tailor it from what actually gets interviews.

Calculate resume score Generate resume to apply

Job Link →