Software Vulnerability Analyst

Job Details

Level ExperiencedJob Location Maryland - Columbia, MDSecondary Job Location(s) UndisclosedRemote Type N/APosition Type Full TimeEducation Level UndisclosedSalary Range UndisclosedTravel Percentage UndisclosedJob Shift UndisclosedJob Category Undisclosed

Description

Has broad knowledge of vulnerability types and exploitation techniques.
Analytical and writing skills sufficient to summarize vulnerability discovery reports into CVE records.
Interpersonal skills sufficient to interact with a diverse set of requesters (including vulnerability researchers, vendors, end users, academics, and others) from around the world.
Can read code (e.g., PHP, Python, and C/C++) and identify weaknesses within it (ability to write code is NOT a required skill set).
Capable of interpreting the output of vulnerability reporting tools (stack traces, crash reports, code weakness, etc.)
Understands the general security models for a broad range of technologies (e.g., networking, applications, cryptology, web, embedded, kernel, etc.).
Understands the Coordinated Vulnerability Disclosure (CVD) process and how CVE's place within it.
Analytical and interpersonal skills sufficient to handle disputes when parties disagree on whether a finding is a vulnerability.