ME00629-System Vulnerability Analyst 4

Momentum Engineering, Inc.•Fort Meade, MD

43d•$150,000 - $200,000

About The Position

Seeking an experienced System Vulnerability Analyst to support mission-critical Department of Defense (DoD) and Intelligence Community (IC) cybersecurity operations. The successful candidate will assess, identify, and mitigate vulnerabilities across enterprise networks, systems, and cloud environments while supporting advanced cyber defense initiatives. This role requires experience operating in Red Team and Blue/Purple Team environments to evaluate security posture, validate defensive capabilities, and improve organizational resilience against sophisticated cyber threats. The ideal candidate possesses expertise in network analysis, threat detection, vulnerability assessment, adversary tactics, and Zero Trust security principles. This position also requires occasional OCONUS travel in support of customer mission requirements.

Requirements

Must have active Top Secret/SCI clearance with NSA Full Scope Polygraph
Master’s degree with 9 years of relevant experience, Bachelor’s degree with 11 years of relevant experience, Associate's degree with 13 years of in-depth relevant experience that is clearly related to the position
Experience supporting cybersecurity operations on programs of similar scope and complexity
Demonstrated experience conducting Red Team operations
Experience supporting Blue Team or Purple Team cybersecurity activities
Experience performing network analysis, network anomaly detection, and threat hunting
Experience identifying and analyzing Indicators of Compromise (IOCs)
Strong understanding of the MITRE ATT&CK Framework and adversary tactics, techniques, and procedures (TTPs)
Knowledge of NIST cybersecurity standards and ISO/IEC 27001 security frameworks
Experience analyzing security events, network traffic, system logs, and endpoint telemetry
Strong analytical, troubleshooting, and problem-solving skills
Willingness and ability to travel OCONUS as required

Nice To Haves

Experience supporting Zero Trust Architecture (ZTA) initiatives
Experience with Computer Network Exploitation (CNE) and Computer Network Operations (CNO)
Experience assessing and hardening enterprise network infrastructure and system architectures
Experience performing penetration testing or offensive security assessments
Experience utilizing vulnerability assessment and security testing tools
Experience with Security Information and Event Management (SIEM) platforms such as Splunk, Microsoft Sentinel, or Elastic
Familiarity with Python scripting for automation, analysis, or tool development
Experience with endpoint detection and response (EDR) platforms and threat intelligence solutions
Experience supporting Department of Defense or Intelligence Community cybersecurity missions

Responsibilities

Conduct vulnerability assessments and security analyses of enterprise networks, systems, and cloud environments to identify security weaknesses and recommend mitigation strategies.
Support Red Team operations by performing adversary emulation, vulnerability validation, and security assessments to evaluate organizational defenses.
Participate in Blue Team and Purple Team activities to improve detection capabilities, validate defensive controls, and enhance incident response procedures.
Analyze network traffic, system logs, endpoint telemetry, and security event data to identify malicious or unauthorized activity.
Perform network anomaly detection and investigate Indicators of Compromise (IOCs) across multiple data sources.
Apply the MITRE ATT&CK Framework to map adversary behaviors, assess attack techniques, and improve detection and defensive strategies.
Assess network infrastructure, architecture, and system configurations to identify opportunities for security hardening and Zero Trust implementation.
Support cybersecurity initiatives involving Computer Network Exploitation (CNE), Computer Network Operations (CNO), and enterprise network security.
Evaluate security controls against industry standards and best practices, including NIST Cybersecurity Framework, NIST SP 800 Series, and ISO/IEC 27001.
Develop technical reports documenting vulnerabilities, threat assessments, security findings, and remediation recommendations.
Collaborate with cybersecurity engineers, incident responders, system administrators, and network engineers to implement corrective actions and strengthen enterprise security.
Support security testing, validation, and continuous monitoring activities to maintain compliance with organizational security requirements.
Participate in OCONUS travel supporting customer cybersecurity assessments and operational requirements as needed.