{"id":3577516,"url":"https://alion.io/job/amentum-senior-cyber-vulnerability-analyst","title":"Senior Cyber Vulnerability Analyst","company":{"id":14861,"name":"Amentum","domain":"amentum.com","url":"https://alion.io/company/amentum","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":445,"ghost_share":0,"stale_share":0.939,"repost_share":0,"time_to_fill_p50_days":18,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":118000,"max_usd":226000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CVSS","optional":false},{"name":"GCP","optional":false},{"name":"Ghidra","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Nmap","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false}],"status":"live","first_seen_at":"2026-10-30T00:00:00Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-10T00:57:40Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Are you interested in using your skills to help shape the Cyber, Security, & Intel space? If so, look no further. Amentum is seeking a Senior Cyber Vulnerability Analyst to join our team of passionate individuals at Fort Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.\nIn support of DISA, Amentum’s Intel and Cyber Division is expanding a proven team of highly skilled engineers and architects to support a program that provides critical IT capabilities to the Department of Defense. This team is committed to engineering, assembling, integrating, deploying, and sustaining an innovative IT enterprise solution.\nOur team delivers secure, mission-critical capabilities where system integrity and rapid deployment are paramount. We are seeking a Senior Cyber Vulnerability Analyst who combines meticulous technical discipline with strategic foresight. In this role, you will lead efforts to establish and maintain robust baselines in a rapidly evolving operational environment. Success requires the ability to navigate complex, unique technical challenges independently while fostering collaborative solutions across integrated teams. To excel, you must possess a proactive learning mindset and the agility to rapidly master and govern the integration of next-generation systems and services.\nWork Schedule: 8 Hours per day, Monday thru Friday\nEssential Responsibilities: The duties and responsibilities of the Senior Cyber Vulnerability Analyst but are not limited to the following:\nThe Senior Cyber Vulnerability Analyst serves as a subject matter expert in identifying, analyzing, prioritizing, and communicating vulnerabilities affecting mission systems, enterprise networks, and adversary-relevant technologies. The incumbent blends technical depth with intelligence tradecraft, translating vulnerability data and threat reporting into actionable risk assessments for senior leaders, system owners, and mission partners. The incumbent works independently on complex, high-visibility problems and provides technical guidance across the organization and the broader Intelligence Community (IC)\nConduct in-depth analysis of software, firmware, hardware, protocol, and configuration vulnerabilities, determining root cause, exploitability, and potential mission impact. \nPerform and oversee authorized vulnerability scanning, penetration testing, and red/blue/purple-team activities on IC networks, systems, and enclaves. \nDevelop and refine risk-scoring methodologies that combine CVSS, exploit availability, asset criticality, and threat actor intent and capability. \nValidate findings, eliminate false positives, and produce reproducible technical evidence. \nCorrelate vulnerabilities with all-source intelligence, adversary tactics, techniques, and procedures (TTPs), and active campaigns to prioritize remediation. \nTrack exploitation trends, zero-day disclosures, and emerging attack surfaces, including cloud, supply chain, operational technology, and AI-enabled systems. \nContribute to finished intelligence products, technical bulletins, and threat advisories, applying IC analytic standards (ICD 203) for sourcing, confidence, and tradecraft. \nParticipate in vulnerability equities and disclosure deliberations as directed by agency policy. \nPrepare clear written assessments and executive briefings tailored to technical and non-technical audiences, including senior leadership. \nAdvise system owners, authorizing officials, and program managers on mitigation strategies, compensating controls, and risk acceptance. \nSupport incident response by rapidly assessing exploited vulnerabilities and recommending containment and remediation actions. \nCoordinate with IC elements, DoD components, federal partners (e.g., CISA, NSA, FBI), and approved industry and international partners on vulnerability information sharing. \nRepresent the organization in working groups, technical exchanges, and community-of-interest forums. \nMentor and review the work of junior and mid-level analysts; lead technical training and knowledge-sharing sessions. \nDevelop and improve analytic tools, scripts, automation, and standard operating procedures to increase scale and consistency. \nEvaluate commercial and government vulnerability management tools and make recommendations on adoption. \nWork Environment, Physical Demands, and Mental Demands:\nEmployee will work in a SCIF on a daily basis.\nEmployee may also be required to work in a datacenter environment for specified periods of time.\nMinimum Requirements (Knowledge, Skills, and Abilities)\nThe successful candidate will combine senior-level project management expertise, operational leadership, business acumen, and an understanding of the Intelligence Community mission to deliver reliable, scalable, and mission-focused capabilities\nExperience with enterprise shared services, service management, or IT/business operations. \nExperience with Agile, Lean, DevSecOps, or hybrid delivery methodologies. \nExperience with enterprise transformation, modernization, data initiatives, or digital services. \nExperience supporting federal acquisition, contracting, or vendor-management activities. \nFamiliarity with federal cybersecurity, risk-management, and information-assurance frameworks. \nExperience developing executive dashboards, performance metrics, and organizational governance models. \nDemonstrated experience leading complex, enterprise-level initiatives involving multiple stakeholders and organizational functions. \nExperience managing shared services, enterprise operations, or centralized support capabilities. \nDemonstrated experience operating in a federal government, defense, national security, or Intelligence Community environment. \nStrong knowledge of project management methodologies, governance, risk management, and performance management. \nDemonstrated ability to lead through influence in matrixed organizations. \nExcellent written, verbal, briefing, and executive communication skills. \nStrong analytical, organizational, and problem-solving capabilities. \nAbility to manage multiple priorities in a high-tempo environment. \nAbility to work with sensitive and classified information in accordance with applicable security requirements Excellent written and verbal communication skills, including the ability to brief technical and non-technical audiences. \nundefined\nAbility to work independently and lead small teams or workstreams. \nDemonstrated experience developing and managing configuration baselines in complex technical environments. \nExperience administering or supporting formal change control processes and Configuration Control Boards. \nExperience with configuration status accounting, configuration audits, change tracking, and baseline management. \nDemonstrated ability to analyze technical information and assess the potential impact of proposed system changes. \nExperience working with government or highly regulated environments. \nStrong written and verbal communication skills, including the ability to brief senior government and program leadership. \nStrong organizational skills and the ability to manage multiple priorities in a mission-focused environment. \nAbility to work independently while collaborating effectively with multidisciplinary teams\nSecurity Clearance Required: Must have active Top Secret clearance with SCI eligibility\n Minimum Education: Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent experience. [Advanced degree may substitute for experience or equivalent professional experience (typically 4 additional years in lieu of degree). \nMinimum Years of Experience:\nMinimum of 8 years of progressive experience in vulnerability analysis, penetration testing, reverse engineering, threat analysis, or related cybersecurity work (6 years with a master's degree). \nDemonstrated experience with vulnerability scanners and assessment tools (e.g., Nessus, Tenable, Qualys, Nmap, Metasploit, Burp Suite) and scripting in Python, PowerShell, or Bash. \nDemonstrated ability to write and brief clear, concise technical assessments for senior audiences. \nExperience in reverse engineering, binary analysis, or exploit development (e.g., IDA, Ghidra). \nExperience with cloud security (AWS, Azure, GCP), containers, or operational technology and industrial control systems. \nPrior experience in an IC, DoD, or federal cyber mission environment. \nExperience with vulnerability management programs at enterprise scale and with vulnerability disclosure or equities processes. \nFamiliarity with analytic standards and structured analytic techniques. \nRequired Certification: (One or more of the following)\nCertified Information System Security Professional (CISSP)\nOffSec Certified Professional (OSCP)\nGIAC Certified Intrusion Analyst (GCIA)\nGIAC Certified Incident Handler (GCIH)\nGIAC Reverse Engineering Malware (GREM)\nCertified Ethical Hacker (CEH)\nPreferred Qualifications:\nCertified Information Security Manager (CISM)\nCertified Information System Auditor (CISA)\nThis position is designated as a safety sensitive position.\nAs part of our commitment to maintaining a safe and compliant work environment, Amentum is a drug-free workplace and requires all personnel to comply with company drug and alcohol policies as a condition of employment. Employment is contingent upon successful completion of the drug screening process. Please note that this may include pre-hire screening for marijuana, as well as other federally controlled substances due to Amentum’s role as a federal contractor and trusted partner to the US Government.\nOther Responsibilities:\nSafety - Amentum enforces a safety culture whereby all employees have the responsibility for continuously developing and maintaining a safe work environment. As appropriate, each employee is responsible for completing all training requirements and fulfilling all self-aid/buddy aid responsibilities, participating in emergency response tasks and serving on safety committees and teams.\nQuality - Quality is the foundation for the management of our business and the keystone to our goal of customer satisfaction. It is our policy to consistently provide services that meet customer expectations. Accordingly, each employee must conform to the Amentum Quality Policy and carry out job activities in compliance with applicable Amentum Quality System documents and customer contracts. Each employee must read and understand his/her Quality Management and Customer Satisfaction responsibilities.\nProcedure Compliance - Each employee must read, understand and implement the general and specific operational, safety, quality and environmental requirements of all plans, procedures and policies pertaining to his/her job. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.\nCompensation Details:\n$130k - $180kThe compensation range or hourly rate listed for this position is provided as a good-faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.\nBenefits Overview:\nOur health and welfare benefits are designed to support you and your priorities. Offerings include:\nHealth, dental, and vision insurance\n\nPaid time off and holidays\n\nRetirement benefits (including 401(k) matching)\n\nEducational reimbursement\n\nParental leave\n\nEmployee stock purchase plan\n\nTax-saving options\n\nDisability and life insurance\n\nPet insurance\n\nNote: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), t...","description_format":"text","description_chars":13185,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Military Logistics","Business Process Outsourcing (BPO)","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-10-31T22:48:03Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 4","filings_12m":4,"filings_prev_12m":5,"green_card_filings_12m":0,"median_offered_wage_usd":107500,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.63,"p_room":0.9,"age_days":10,"expected_fill_days":18,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/amentum-senior-cyber-vulnerability-analyst","json_url":"https://alion.io/job/amentum-senior-cyber-vulnerability-analyst.json","meta":{"generated_at":"2026-11-10T04:48:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11217,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":14861},"rest":"https://alion.io/mcp/rest/get_company?id=14861"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famentum-senior-cyber-vulnerability-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famentum-senior-cyber-vulnerability-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famentum-senior-cyber-vulnerability-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amentum-senior-cyber-vulnerability-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famentum-senior-cyber-vulnerability-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3577516}},{"tool":"search_jobs","arguments":{"company":"amentum.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3577516},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}