Назад
1 месяц назад

Vulnerability Analyst

100 000 - 258 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Vulnerability Analyst (Python/CVSS/MITRE ATT&CK): Assessing and prioritizing security vulnerabilities across the organization with an accent on CVSS scoring, reachability analysis, and automated security data processing. Focus on building Python-based reporting solutions, analyzing attack paths, and communicating risk to cross-functional stakeholders.

Location: Palo Alto, CA; Austin, TX; New York, NY; or Washington, DC. The role is subject to U.S. ITAR eligibility requirements.

Base salary: $100,000–$258,000 USD per year, plus equity and benefits.

Company

xAI develops AI systems designed to understand the universe and support humanity's pursuit of knowledge.

What you will do

  • Conduct vulnerability assessments using the CVSS standard, including environmental processing, vector strings, and vector chaining.
  • Analyze vulnerability reachability, impact, and organizational risk to prioritize security responses.
  • Write Python scripts to process security data from CSV, Excel, JSON, and REST APIs.
  • Apply the MITRE ATT&CK framework for attack path analysis.
  • Create data reporting solutions and simple dashboards for communicating security findings.
  • Partner with cross-functional stakeholders to improve security posture and drive security adoption.

Requirements

  • Deep expertise in vulnerability assessment, data management, and security risk analysis.
  • Mastery of CVSS and its environmental processing.
  • Strong Python skills for security data manipulation and automation.
  • Proficiency with the MITRE ATT&CK framework and vulnerability mitigation strategies.
  • Experience creating dashboard-based security reports and communicating findings to stakeholders.
  • Must meet U.S. ITAR eligibility requirements: U.S. citizen or national, lawful permanent resident, refugee, asylee, or eligible to obtain the required U.S. authorizations.

Nice to have

  • Experience with Elastic or OpenSearch.
  • Familiarity with Kibana or Grafana dashboarding.
  • Experience developing security automation playbooks.
  • Experience with AWS or GCP.
  • Experience building agentic workflows for vulnerability management.

Culture & Benefits

  • Small, fast-paced team focused on engineering excellence, innovation, and creativity.
  • Flat organizational structure with hands-on contribution and initiative-driven leadership.
  • Equity and comprehensive medical, vision, and dental coverage.
  • Access to a 401(k) retirement plan, short- and long-term disability insurance, life insurance, discounts, and other perks.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →