Vulnerability & Threat Analyst (US)

VulnCheck•Austin, MA

7d•Remote

About The Position

VulnCheck is seeking a detail-oriented Vulnerability & Threat Intelligence Analyst to join their expanding Threat Intelligence team. This is a 100% remote role, with a preference for candidates located in Massachusetts, Maryland, or the Greater Austin, TX area. The analyst will be responsible for analyzing diverse threat intelligence sources to identify and confirm exploited vulnerabilities, active exploits, threat actors, malicious infrastructure, and indicators of compromise (IOCs). The role involves validating the accuracy and credibility of sources, assessing evidence of real-world exploitation, and maintaining structured, high-quality intelligence outputs. The company focuses on delivering structured exploit intelligence on what is actively weaponized in the wild, purpose-built for data lakes, ETL pipelines, automation, and AI/LLM workflows.

Requirements

Ability to evaluate exploit PoCs; familiarity with scripting languages.
Experience with OSINT tools and resources.
Understanding of IOCs and how to identify them.
Ability to assess the credibility and validity of intelligence sources.
Strong understanding of CVEs, including CVE assignment and validation.
Familiarity with CPE and scoring methodologies.
Experience working with structured data formats (e.g., JSON).
High attention to detail and analytical rigor.
Familiarity with end-of-life (EOL) software data.
Experience with developer/security tooling (e.g., VS Code and extensions).
Familiarity with package ecosystems (NPM, NuGet, PyPI).

Nice To Haves

Python scripting skills preferred.
Experience with prompt engineering is a plus.

Responsibilities

Analyze diverse threat intelligence sources to identify and confirm exploited vulnerabilities (KEVs), exploits and proof-of-concepts (PoCs), threat actors, Botnets and Ransomware campaigns, malicious hosts, domains and infrastructure, and Indicators of compromise (IOCs).
Validate the accuracy and credibility of sources and findings.
Assess evidence of real-world exploitation.
Maintain structured, high-quality intelligence outputs.