Vulnerability Assessment Analyst

Strategic Operational Solutions • Fort Liberty, NC

1d • Onsite

About The Position

Strategic Operational Solutions (STOPSO) is seeking a Vulnerability Assessment Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Assess systems, networks, and web applications for vulnerabilities and validate corrective actions. The analyst conducts authorized testing within approved scope and documents findings that support risk reduction.

Requirements

• Minimum 3 years of documented relevant experience. Relevant vulnerability and web or network assessment experience, CVSS v3 proficiency, and ability to document and validate findings.
• DoD Cyber Workforce Framework (DCWF) Vulnerability Assessment Analyst, Intermediate proficiency. The current qualification matrix identifies this work role as 541; appointment will follow the Government-approved role mapping.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 541 Intermediate: CEH(P), CPTE, Cloud+, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, RCCE Level 1, Security+.
• Completion of the Army Penetration Testing Course is required before executing Persistent Penetration Testing.
• Demonstrated knowledge of Vulnerability assessment, web application and network testing, CVSS v3, evidence handling, remediation validation, and rules of engagement.
• Proficiency with ACAS, Burp Suite, approved scanning and assessment platforms, Wireshark, Windows, and Kali Linux appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.
• Active SECRET clearance and ability to maintain assigned system access.
• U.S. citizenship is required.

Nice To Haves

• Experience with authorized DoD assessment missions and remediation retesting.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Responsibilities

• Conduct vulnerability, network, and web application assessments using approved tools and rules of engagement.
• Analyze configurations, scan results, exploitability, and operational context; apply CVSS v3 to help prioritize findings.
• Document affected assets, evidence, risk, recommended remediation, and retest results in clear assessment products.
• Support Network Assistance Visits, Network Damage Assessments, and integrated assessments as assigned.
• Validate asserted remediation and track closure according to severity and program reporting requirements.
• Execute Persistent Penetration Testing only after required Army Penetration Testing Course completion and authorization.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed