IT Analyst Mid Level – Vulnerability Assessment Analyst

Cherokee Federal•Huntsville, AL

3d•Onsite

About The Position

Cybersecurity professional responsible for identifying, analyzing, and reporting vulnerabilities across an organization’s systems, networks, and applications. Correlates data across multiple sources to assess attack effectiveness, review infrastructure, and response. Documents, tracks, escalates, and coordinates incident activities with enterprise cyber defense teams to support validation, containment, mitigation, and recovery. Produces detailed incident reports describing nature, scope, status, and operational impact of cybersecurity compromises. Reports will include actionable recommendations to strengthen the organization’s security posture.

Requirements

Risk & Threat Analysis: Assess the potential impact of compromised information and recommend protective measures.
Operational Review: Examine operational procedures, communication systems, and information handling to recommend mitigation strategies.
Technical Skills: Network security, intrusion detection/prevention, vulnerability assessment, network monitoring, and security tool management.
Analytical Skills: Event correlation, threat analysis, and situational awareness.
Knowledge Areas: Cybersecurity principles, networking protocols, laws/regulations, and ethics in cybersecurity.
Experience: 5+ years in a similar role; in defense sectors, 5–10 years in DoD/IC or related environments.
Must pass pre-employment qualifications of Cherokee Federal.
Must have an active TS/SCI clearance.

Nice To Haves

Certified Ethical Hacker (CEH)
OffSec OSCP (PEN-200)
SANS SEC660 (Advanced Penetration Testing)
SANS LDR516 (Strategic Vulnerability & Threat Management)
Other relevant credentials

Responsibilities

Measure the effectiveness of defense‑in‑depth architectures against known vulnerabilities.
Analyze vulnerability scans, penetration testing, and threat modeling to prepare detailed audit or assessment reports with remediation recommendations.
Able to assess data pertinent to multiple sources which monitor systems and assess the effectiveness of various attack methods.
Provide summaries, trend analyses, and security posture assessments.
Perform technical and non‑technical vulnerability assessments across networks, systems, applications, and enclave boundaries.
Identify deviations from acceptable configurations, policies, and security standards.
Maintain knowledge of cyber defense policies, regulations, and compliance requirements.