Роль четко определена с хорошим диапазоном зарплаты и акцентом на анализ уязвимостей, но требование соответствия ITAR может ограничить круг кандидатов.
Vulnerability Analyst (Python/CVSS/MITRE ATT&CK): Assessing and prioritizing security vulnerabilities across the organization with an accent on CVSS scoring, reachability analysis, and automated security data processing. Focus on building Python-based reporting solutions, analyzing attack paths, and communicating risk to cross-functional stakeholders.
Location: Palo Alto, CA; Austin, TX; New York, NY; or Washington, DC. The role is subject to U.S. ITAR eligibility requirements.
Base salary: $100,000–$258,000 USD per year, plus equity and benefits.
Company
xAI develops AI systems designed to understand the universe and support humanity's pursuit of knowledge.
What you will do
Conduct vulnerability assessments using the CVSS standard, including environmental processing, vector strings, and vector chaining.
Analyze vulnerability reachability, impact, and organizational risk to prioritize security responses.
Write Python scripts to process security data from CSV, Excel, JSON, and REST APIs.
Apply the MITRE ATT&CK framework for attack path analysis.
Create data reporting solutions and simple dashboards for communicating security findings.
Partner with cross-functional stakeholders to improve security posture and drive security adoption.
Requirements
Deep expertise in vulnerability assessment, data management, and security risk analysis.
Mastery of CVSS and its environmental processing.
Strong Python skills for security data manipulation and automation.
Proficiency with the MITRE ATT&CK framework and vulnerability mitigation strategies.
Experience creating dashboard-based security reports and communicating findings to stakeholders.
Must meet U.S. ITAR eligibility requirements: U.S. citizen or national, lawful permanent resident, refugee, asylee, or eligible to obtain the required U.S. authorizations.
Experience building agentic workflows for vulnerability management.
Culture & Benefits
Small, fast-paced team focused on engineering excellence, innovation, and creativity.
Flat organizational structure with hands-on contribution and initiative-driven leadership.
Equity and comprehensive medical, vision, and dental coverage.
Access to a 401(k) retirement plan, short- and long-term disability insurance, life insurance, discounts, and other perks.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →