Senior Cyber Vulnerability Analyst

Are you interested in using your skills to help shape the Cyber, Security, & Intel space?  If so, look no further. Amentum is seeking a Senior Cyber Vulnerability Analyst  to join our team of passionate individuals at Fort Meade, MD. In this role you will support challenging, mission-critical projects that make a direct impact on the Nation’s security and intelligence mission.

In support of DISA, Amentum’s Intel and Cyber Division is expanding a proven team of highly skilled engineers and architects to support a program that provides critical IT capabilities to the Department of Defense. This team is committed to engineering, assembling, integrating, deploying, and sustaining an innovative IT enterprise solution.

Our team delivers secure, mission-critical capabilities where system integrity and rapid deployment are paramount. We are seeking a Senior Cyber Vulnerability Analyst who combines meticulous technical discipline with strategic foresight. In this role, you will lead efforts to establish and maintain robust baselines in a rapidly evolving operational environment. Success requires the ability to navigate complex, unique technical challenges independently while fostering collaborative solutions across integrated teams. To excel, you must possess a proactive learning mindset and the agility to rapidly master and govern the integration of next-generation systems and services.

Work Schedule:  8 Hours per day, Monday thru Friday

Essential Responsibilities: The duties and responsibilities of the Senior Cyber Vulnerability Analyst but are not limited to the following:

The Senior Cyber Vulnerability Analyst serves as a subject matter expert in identifying, analyzing, prioritizing, and communicating vulnerabilities affecting mission systems, enterprise networks, and adversary-relevant technologies. The incumbent blends technical depth with intelligence tradecraft, translating vulnerability data and threat reporting into actionable risk assessments for senior leaders, system owners, and mission partners. The incumbent works independently on complex, high-visibility problems and provides technical guidance across the organization and the broader Intelligence Community (IC)

• Conduct in-depth analysis of software, firmware, hardware, protocol, and configuration vulnerabilities, determining root cause, exploitability, and potential mission impact.

• Perform and oversee authorized vulnerability scanning, penetration testing, and red/blue/purple-team activities on IC networks, systems, and enclaves.

• Develop and refine risk-scoring methodologies that combine CVSS, exploit availability, asset criticality, and threat actor intent and capability.

• Validate findings, eliminate false positives, and produce reproducible technical evidence.

• Correlate vulnerabilities with all-source intelligence, adversary tactics, techniques, and procedures (TTPs), and active campaigns to prioritize remediation.

• Track exploitation trends, zero-day disclosures, and emerging attack surfaces, including cloud, supply chain, operational technology, and AI-enabled systems.

• Contribute to finished intelligence products, technical bulletins, and threat advisories, applying IC analytic standards (ICD 203) for sourcing, confidence, and tradecraft.

• Participate in vulnerability equities and disclosure deliberations as directed by agency policy.

• Prepare clear written assessments and executive briefings tailored to technical and non-technical audiences, including senior leadership.

• Advise system owners, authorizing officials, and program managers on mitigation strategies, compensating controls, and risk acceptance.

• Support incident response by rapidly assessing exploited vulnerabilities and recommending containment and remediation actions.

• Coordinate with IC elements, DoD components, federal partners (e.g., CISA, NSA, FBI), and approved industry and international partners on vulnerability information sharing.

• Represent the organization in working groups, technical exchanges, and community-of-interest forums.

• Mentor and review the work of junior and mid-level analysts; lead technical training and knowledge-sharing sessions.

• Develop and improve analytic tools, scripts, automation, and standard operating procedures to increase scale and consistency.

• Evaluate commercial and government vulnerability management tools and make recommendations on adoption.

Work Environment, Physical Demands, and Mental Demands:

• Employee will work in a SCIF on a daily basis.

• Employee may also be required to work in a datacenter environment for specified periods of time.

Minimum Requirements (Knowledge, Skills, and Abilities)

• The successful candidate will combine senior-level project management expertise, operational leadership, business acumen, and an understanding of the Intelligence Community mission to deliver reliable, scalable, and mission-focused capabilities

• Experience with enterprise shared services, service management, or IT/business operations.

• Experience with Agile, Lean, DevSecOps, or hybrid delivery methodologies.

• Experience with enterprise transformation, modernization, data initiatives, or digital services.

• Experience supporting federal acquisition, contracting, or vendor-management activities.

• Familiarity with federal cybersecurity, risk-management, and information-assurance frameworks.

• Experience developing executive dashboards, performance metrics, and organizational governance models.

• Demonstrated experience leading complex, enterprise-level initiatives involving multiple stakeholders and organizational functions.

• Experience managing shared services, enterprise operations, or centralized support capabilities.

• Demonstrated experience operating in a federal government, defense, national security, or Intelligence Community environment.

• Strong knowledge of project management methodologies, governance, risk management, and performance management.

• Demonstrated ability to lead through influence in matrixed organizations.

• Excellent written, verbal, briefing, and executive communication skills.

• Strong analytical, organizational, and problem-solving capabilities.

• Ability to manage multiple priorities in a high-tempo environment.

• Ability to work with sensitive and classified information in accordance with applicable security requirements Excellent written and verbal communication skills, including the ability to brief technical and non-technical audiences.

• undefined

• Ability to work independently and lead small teams or workstreams.

• Demonstrated experience developing and managing configuration baselines in complex technical environments.

• Experience administering or supporting formal change control processes and Configuration Control Boards.

• Experience with configuration status accounting, configuration audits, change tracking, and baseline management.

• Demonstrated ability to analyze technical information and assess the potential impact of proposed system changes.

• Experience working with government or highly regulated environments.

• Strong written and verbal communication skills, including the ability to brief senior government and program leadership.

• Strong organizational skills and the ability to manage multiple priorities in a mission-focused environment.

• Ability to work independently while collaborating effectively with multidisciplinary teams

Security Clearance Required:   Must have active Top Secret clearance with SCI eligibility

• Minimum Education: Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related field, or equivalent experience. [Advanced degree may substitute for experience or equivalent professional experience (typically 4 additional years in lieu of degree).

Minimum Years of Experience:

• Minimum of 8 years of progressive experience in vulnerability analysis, penetration testing, reverse engineering, threat