Vulnerability Assessment Analyst (Fort Bragg, NC)

Akira Technologies Inc. • Fort Bragg, NC, US, NC

3d • $85,000 - $100,000 • Onsite

About The Position

Akira Technologies is seeking a Vulnerability Assessment Analyst to support the U.S. Army Reserve Command (USARC) in cyberspace operations supporting Army and joint requirements. The Vulnerability Assessment Analyst will plan and execute cybersecurity assessments under the Computer Defense Assistance Program (CDAP), including Network Assistance Visits (NAV), Network Damage Assessments (NDA), and web application assessments. The analyst will validate suspected compromises, identify vulnerabilities and intrusion depth, and recommend mitigation, recovery, and prevention actions. This is an onsite position at Fort Bragg, NC supporting a mission-focused U.S. Army Reserve Command cyberspace operations environment. Active Secret clearance or higher is required.

Requirements

• Army Penetration Testing Course (APTC) or equivalent credential required for personnel performing Persistent Penetration Testing under applicable PWS requirements.
• Active Secret security clearance at a minimum; TS/SCI eligibility/access where required by the assigned work role or supported network.
• Demonstrated experience with vulnerability assessment and web application security tools, including ACAS, Nessus, Burp Suite Professional, and/or OWASP ZAP, and exploitation frameworks such as Metasploit and Cobalt Strike.
• Proficiency in CVSSv3 scoring, vulnerability analysis, web application security testing, and network penetration-testing methodologies.
• Experience conducting cybersecurity assessments under formal Rules of Engagement (ROE) in a DoD environment.
• Experience identifying, validating, documenting, and prioritizing vulnerabilities and providing actionable remediation recommendations.
• Ability to work effectively in a classified, mission-focused environment and support operational requirements, including short-notice travel when required.

Nice To Haves

• Experience supporting Army, Army Reserve, ARCYBER, or joint cyberspace operations.
• Experience with CDAP, Network Assistance Visits, Network Damage Assessments, or similar DoD cybersecurity assessment programs.
• Familiarity with MITRE ATT&CK, OWASP Top 10, CVE, and CVSS.
• Experience with forensic artifact collection and compromise assessments.
• Familiarity with DISA STIGs/SRGs and DoD cybersecurity requirements.
• Relevant penetration testing, vulnerability management, or cybersecurity certifications are a plus.

Responsibilities

• Plan and execute CDAP integrated assessment missions, including NAV, NDA, and web assessments, in accordance with AR 380-53, applicable Rules of Engagement (ROE), and ARCYBER/RCC procedures.
• Conduct NAV activities including pre-coordination, network surveys, technical support, customized training, briefings, and final reporting.
• Respond to approved NDA requests within four hours of notification when directed; validate suspected compromises, determine intrusion scope, collect logs and forensic artifacts, and support onsite incident handling.
• Assist affected administrators with securing compromised networks and provide situational-awareness updates to leadership during active assessments.
• Coordinate assessment activities with ARCYBER, supported RCC personnel, ISSOs, mission owners, system administrators, and other stakeholders.
• Prepare formal NDA reports within five business days and NAV final reports within 30 calendar days, using approved reporting and handling procedures.
• Conduct annual web application assessments of registered public-facing websites using approved tools such as OWASP ZAP, Burp Suite Professional, Nessus Web Application Security Scanner, or successor tools.
• Analyze and validate assessment findings, including XSS, SQL injection, embedded credentials, exposed services, and other common vulnerabilities, while minimizing false positives and maximizing attack-vector coverage.
• Coordinate remediation validation and conduct 30/60/90-day retesting, based on finding severity and applicable requirements.
• Maintain authorized assessment tools in accordance with applicable DISA STIG/SRG requirements and Government-approved configurations.
• Ensure required authorization documentation, including current Letters of Authorization and APTC or equivalent credentials, is in place before conducting authorized testing against production systems.
• Maintain accurate assessment documentation, findings, evidence, remediation status, and technical reports.
• Perform other vulnerability assessment and DCO support duties as required.

Benefits

• Multiple options for medical plans (some with Health Savings Account)
• Dental plans
• Vision coverage
• 401(k) plan with employer match
• Paid time off, including vacation and sick time
• Holidays
• Paid parental leave
• Military leave
• Bereavement leave
• Jury duty leave
• Short and long-term disability benefits
• Life insurance
• Accidental death and dismemberment insurance
• Critical illness insurance
• Tuition, training, and certification reimbursement for professional development and career advancement

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed