Vulnerability Analyst

Job Title: Vulnerability Analyst Location: Oak Ridge, TN What You'll Do The Vulnerability Analyst is responsible for analyzing key data streams and interpreting threats, vulnerabilities, impacts, and likelihood of asset exposure. The aggregation of ingested data informs analysis with key identifiers to generate a holistic view of the enterprise and provide recommended mitigations and/or remediation of possible exploitable assets. The analyst also assists Vulnerability and Compliance Assessment Management with cyber analysis to support exception requests and provides recommendations for enterprise‑level system and application designs. This role involves a wide range of cybersecurity areas, including system architectures, firewalls, inspection and analysis tools, encryption components, networking architectures, security reporting, and analysis to regulatory agencies. Identify systemic security issues based on the analysis of vulnerability and configuration data. Share meaningful insights about the organization’s threat environment that improve risk management posture. Apply cybersecurity and privacy principles to organizational requirements. Implement host/network access control mechanisms. Conduct vulnerability scans and recognize vulnerabilities in security systems. Assess the robustness of security systems and designs. Detect host and network‑based intrusions via intrusion detection technologies. Mimic threat behaviors and support penetration testing tools and techniques. Use social engineering techniques such as phishing and baiting. Support network analysis tools to identify vulnerabilities. Review logs to identify evidence of past intrusions. Conduct application vulnerability assessments and perform impact/risk assessments. Develop insights into the organization’s threat environment. Analyze cyber defense policies and configurations and evaluate compliance with regulations. Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents. Qualifications Bachelor’s degree in engineering, science, information technology, or related discipline. Master’s degree in engineering, science, information technology, or related discipline is preferred. Eight or more years of education and/or relevant experience considered for higher career levels. Knowledge of computer networking, network security methodologies, laws, regulations, and cybersecurity threats. Knowledge of risk management processes, cryptography, application and system vulnerabilities, and network access management. Experience with penetration testing, social engineering, and intrusion detection systems. Familiarity with operating systems such as Unix/Linux, IOS, Android, and Windows. Strong analytical, problem‑solving, and communication skills. Clearance Requirements Requires a Q clearance; all qualified candidates are considered regardless of current clearance status. Candidates may be asked to obtain and maintain a Department of Energy Q clearance. Position may require entry into Material Access Areas and participation in counterintelligence evaluations. What You Can Expect Meaningful work supporting missions vital to national and global security. Collaboration with dedicated colleagues. Competitive pay and benefits, including medical, vision, dental, prescription drug plans, 401(k) match, disability coverage, and education reimbursement. Career advancement and professional development programs. Work‑life balance through flexible work options and wellness initiatives. #J-18808-Ljbffr