Senior Vulnerability Analyst (OT Cybersecurity)

Location: United States; remote-first role

Salary: $122,000

Company

hirify.global provides cybersecurity technology, threat intelligence, and expert services to protect critical infrastructure and operational technology systems.

What you will do

• Evaluate vulnerability disclosures from CVE, NVD, CISA KEV, vendor advisories, and other public sources, monitoring emerging feeds for OT relevance and impact.
• Curate and prioritize vulnerabilities based on asset criticality, exploitability, and operational impact on industrial systems.
• Enrich vulnerability data by mapping affected products, firmware versions, and asset classifications.
• Translate technical vulnerability details into OT-contextualized advisories, asset mappings, and mitigation guidance for the hirify.global platform.
• Use platform telemetry and maintain product catalogs to identify detection gaps and improve content accuracy.
• Mentor junior analysts and collaborate with engineering on content workflows, validation, standards, and analysis methodologies.

Requirements

• 4+ years of experience in vulnerability analysis, vulnerability management, or a related technical security discipline, including understanding vulnerability origins, analysis, remediation, and mitigation guidance.
• Strong understanding of the CVE lifecycle, CVSS scoring, CPE, vulnerability advisories, vulnerability databases, threat intelligence feeds, and security content platforms.
• Experience mapping vulnerabilities to affected products, firmware versions, and asset inventories.
• Basic scripting experience in Python or a similar language for querying databases and generating signatures at scale, plus familiarity with command-line tooling and git workflows.
• Comfort using AI tools such as Claude in daily analysis, content creation, and workflow optimization.
• Strong written and verbal communication skills, a self-driven approach, and the ability to produce clear, accurate, actionable technical content.

Nice to have

• Background in asset management or critical infrastructure sectors such as energy, manufacturing, water, or transportation.

Culture & Benefits

• Remote-first team spanning North America, Europe, the Middle East, and APAC.
• Mission-driven work focused on protecting critical infrastructure and operational technology.
• Competitive equity package.
• Comprehensive benefits plan.
• Employment is conditional on passing a background check.