{"id":3726598,"url":"https://alion.io/job/software-engineering-institute-vulnerability-analyst","title":"Vulnerability Analyst","company":{"id":46403,"name":"Software Engineering Institute","domain":"sei.cmu.edu","url":"https://alion.io/company/sei-cmu","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":44,"ghost_share":0,"stale_share":0.523,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pittsburgh, United States","Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Machine Learning","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-11-03T00:00:00Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T20:07:31Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Who We Are\nSEI conducts applied research and development in software engineering, cybersecurity, and AI in support of government sponsors. The SEI works closely with defense and government organizations, industry, and academia to continually improve and secure software-intensive systems. Our core purposes are to help organizations improve software engineering capabilities, advance cybersecurity methods and technologies, and bring the discipline of software engineering to AI systems.\nWhat We Do\nOnce a Computer Emergency Response Team that formed in 1988 in response to the Morris Worm, today the SEI CERT Division leads as a Cybersecurity Engineering and Resilience Team conducting collaborative and innovative evidence-based research to fortify the cyber ecosystem and protect national security and prosperity. The Threat Analysis Directorate builds on CERT’s nearly 40 years of applied research aimed at solving the Nation’s most difficult cybersecurity challenges. Our mission is to advance the state-of-the-art and practice for analyzing, assuring, and countering software systems to enhance National Security. Our team of ~40 professionals work in a highly collaborative environment with specialties including AI security, advanced malware analysis and reverse engineering, and vulnerability analysis. We conduct the applied research necessary to develop and accelerate cyber tradecraft advantages against threats to National Security. \nWhat You’ll Do:\nApply state-of-the-art approaches to understanding systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit those vulnerabilities\nEvaluate the effectiveness of tools, techniques, and processes developed by industry and the security research community\nDevelop models, tools, and data sets that can be used to characterize the threats to-and vulnerabilities in-software systems, and publish those results \nDevelop machine learning-based prototypes, products, and tools to solve and automate solutions to AI-related security problems\nTranslate research concepts into practical, operational capabilities, with the ability to work independently and as part of a collaborative team.\nWho You Are\nMission-Driven Curiosity: You are deeply interested in cybersecurity, AI, and automation, and you want your work to have impacts beyond your organization. You pick up new technologies and domains quickly and adapt as the threat landscape changes.\nAI and Vulnerability Research Expertise: You have hands-on experience in AI-based research, vulnerability research and analysis, and statistical modeling. You understand rigorous research methods in computer science, engineering, security, AI, and related fields, as well as of internet fundamentals including network protocols, provider operations, and governance. \nApplied AI/ML Engineering: You have experience developing software in Python and other modern languages, and you've built AI/ML solutions that work outside the lab. You know what it takes to get from prototype to something people actually use.\nSecurity and Internet Fundamentals: You know cybersecurity best practices and have a strong grasp of how the internet works, including network protocols, provider operations, and governance. That foundation lets you see where AI systems connect with real-world infrastructure and risk.\nTrusted Technical Advisor: You give sound advice on a range of security topics, grounded in research and expert judgment. You explain complex technical approaches clearly, in writing and in person, to managers, technical staff, and customers alike.\nCollaborative and Discreet Professional: You work collaboratively and diplomatically with people inside and outside the organization. You plan and organize complex projects, and you handle confidential and sensitive information with care.\nRequirements:\nBS in computer science, machine learning, cybersecurity, or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience\nYou have a willingness to travel (25%) outside of your office location to other SEI offices, sponsor sites, conferences, and offsite meetings. \nYou will be subject to a background investigation, and you must have the ability to obtain and maintain a Department of War security clearance.\nLocation\nArlington, VA, Pittsburgh, PAJob Function\nSoftware/Applications Development/EngineeringPosition Type\nStaff - RegularFull time/Part time\nFull timePay Basis\nSalaryMore Information:\nPlease visit “Why Carnegie Mellon ” to learn more about becoming part of an institution inspiring innovations that change the world.\n\nClick here to view a listing of employee benefits\n\nCarnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.\n\nStatement of Assurance","description_format":"text","description_chars":4836,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Engineering Services","Research Institutes"],"lifecycle":[{"event":"open","at":"2026-11-04T05:52:54Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":32,"reasons":["conf:5","stale_co","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/software-engineering-institute-vulnerability-analyst","json_url":"https://alion.io/job/software-engineering-institute-vulnerability-analyst.json","meta":{"generated_at":"2026-11-05T20:22:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27636,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46403},"rest":"https://alion.io/mcp/rest/get_company?id=46403"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsoftware-engineering-institute-vulnerability-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsoftware-engineering-institute-vulnerability-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsoftware-engineering-institute-vulnerability-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/software-engineering-institute-vulnerability-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsoftware-engineering-institute-vulnerability-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3726598}},{"tool":"search_jobs","arguments":{"company":"sei.cmu.edu","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3726598},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}