Remote Position

[Remote] Vulnerability & Threat Analyst (US)

🌍 Remote · United States 💼 Full-time

Note: The job is a remote job and is open to candidates in USA. VulnCheck is an exploit intelligence company providing structured intelligence on actively weaponized vulnerabilities for cybersecurity workflows. The Vulnerability & Threat Intelligence Analyst will analyze and validate threat intelligence related to exploited vulnerabilities, exploits, threat actors, malicious infrastructure, and indicators of compromise while maintaining high-quality structured intelligence outputs.

Responsibilities

  • Analyze diverse threat intelligence sources to identify and confirm: + Exploited vulnerabilities (KEVs) + Exploits and proof-of-concepts (PoCs) + Threat actors, Botnets and Ransomware campaigns + Malicious hosts, domains and infrastructure + Indicators of compromise (IOCs)
  • Validate the accuracy and credibility of sources and findings
  • Assess evidence of real-world exploitation
  • Maintain structured, high-quality intelligence outputs

Skills

  • • Ability to evaluate exploit PoCs; familiarity with scripting languages
  • • Experience with OSINT tools and resources
  • • Understanding of IOCs and how to identify them
  • • Ability to assess the credibility and validity of intelligence sources
  • • Strong understanding of CVEs, including:
  • • CVE assignment and validation
  • • Familiarity with CPE and scoring methodologies
  • • Experience working with structured data formats (e.g., JSON)
  • • High attention to detail and analytical rigor
  • • Familiarity with end-of-life (EOL) software data
  • • Experience with developer/security tooling (e.g., VS Code and extensions)
  • • Familiarity with package ecosystems (NPM, NuGet, PyPI)
  • • Python scripting skills preferred
  • • Experience with prompt engineering is a plus

Benefits

  • Unlimited PTO
  • 401k plan with company match
  • Comprehensive healthcare coverage
  • Generous paid parental leave
  • Remote friendly environment with flexibility
  • Expense reimbursement for Cell Phone & Internet
  • Ongoing professional development, coaching, and learning resources
  • Opportunities for career advancement within a fast-growing team

Company Overview

  • VulnCheck provides vulnerability intelligence and exploit monitoring services for security teams. It was founded in 2021, and is headquartered in Lexington, Massachusetts, USA, with a workforce of 51-200 employees. Its website is https://vulncheck.com.
  • Apply Now →

    More Open Positions

    Explore similar remote opportunities