2

Full Time Vulnerability Analyst Jobs (NOW HIRING)

... Vulnerability Management Analyst Location(s): Atlanta: 2300 Windy Ridge Pkwy SE, Suite750, Atlanta ... Role Type: Full-time, Non-Exempt Salary: $105,000 - $120,000 per year + annual performance-based ...

Job Type Full-time Description EOA Technologies is seeking a Cyber Vulnerability Analyst with Penetration Testing/Red Team experience anda deep understanding of adversary tactics, techniques, and ...

We are seeking a Vulnerability Management Analyst (Tenable/Nessus & Metrics ) to support ... Location: Hybrid - Onsite, Arlington, VA,1 day/week and as needed Job Type: Full Time Education:

Information Technology Subcategory: IT Systems Engineer Schedule: Full-Time Shift: Day Job Travel ... Vulnerability Management Analyst to support a transformational infrastructure program for DCSA.

next page

Showing results 1-20

Full Time Vulnerability Analyst information

What is the difference between Full Time Vulnerability Analyst vs Penetration Tester?

AspectFull Time Vulnerability AnalystPenetration Tester
CertificationsCompTIA Security+, CISSP, CEHOSCP, CEH, GPEN
Work EnvironmentIn-house security teams, continuous monitoringProject-based, simulated attacks
Employer & IndustryCorporate, government, cybersecurity firmsConsulting firms, security service providers

Full Time Vulnerability Analysts focus on identifying and prioritizing security weaknesses through ongoing assessments, while Penetration Testers simulate attacks to test defenses. Both roles require similar certifications and often work within the same industry sectors, but their daily tasks and objectives differ. Vulnerability Analysts maintain security posture, whereas Penetration Testers evaluate system resilience through active testing.

More about Full Time Vulnerability Analyst jobs
What cities are hiring for Full Time Vulnerability Analyst jobs? Cities with the most Full Time Vulnerability Analyst job openings:
What are the most commonly searched types of Vulnerability Analyst jobs? The most popular types of Vulnerability Analyst jobs are:
What states have the most Full Time Vulnerability Analyst jobs? States with the most job openings for Full Time Vulnerability Analyst jobs include:
Infographic showing various Full Time Vulnerability Analyst job openings in the United States as of June 2026, with employment types broken down into 1% As Needed, 92% Full Time, and 7% Contract. Highlights an 81% Physical, 7% Hybrid, and 12% Remote job distribution.
Hardware Security and Vulnerability Analyst - Remote

Hardware Security and Vulnerability Analyst - Remote

EndoSec LLC

Lafayette, IN • Remote

Full-time

Posted 25 days ago


Job description

Hardware Security and Vulnerability Analyst - Remote

  • EndoSec LLC,
  • Remote
  • Preferred Skills: C/C++, Python, assembly, IDA Pro, Ghidra, FPGA, cryptography, hardware, embedded software, hardware security, reverse engineering, side channel attacks, fault injection
  • Travel required up to 20%.

Full Time

Must be able to apply for and maintain a U.S. Government Security Clearance

Job Description

The EndoSec Hardware Security and Vulnerability Analyst is responsible for extracting and analyzing firmware and data at rest, identifying vulnerabilities in software, firmware, and hardware, as well as developing proof of concept exploits. The candidate will collaborate with other engineers and security experts to find and exploit security flaws and vulnerabilities within devices and designs as well as to build secure and efficient systems, contributing to our products and services? ongoing security and privacy. This is a remote position.

Key Responsibilities

  1. System Analysis: Analyze systems to understand functionality, failure points, and consequences of failure.
  2. Security Measure Circumvention: Bypass implemented security measures to gain access to sensitive data, including enabling debugging, forging or bypassing signatures, gaining elevated privileges, and simulating environmental and working conditions.
  3. Binary Code Extraction and Analysis: Extract firmware, executables, and other sensitive data from embedded systems and analyze the extracted code for possible vulnerabilities and sensitive data, e.g. passwords, cryptographic keys, etc.
  4. Side-Channel Analysis and Fault Injection: Setup and perform side-channel analysis to recover sensitive data, e.g. cryptographic keys, sensitive plaintext, etc. Setup and perform fault injection attacks to bypass security measures and/or recover sensitive data.
  5. Exploit Development: Develop custom and novel exploits to bypass security measures, recover sensitive data, or gain elevated privileges in embedded systems.
  6. Documentation: Prepare detailed documentation, including physical setups, testing procedures, and user guides, for reproducibility of found results and maintenance.
  7. Continuous Learning: Stay current with the latest advancements in reverse engineering and hardware security to continually refine and enhance skills.

EndoSec logo

About EndoSec

Sourced by ZipRecruiter

Industry

Guided missile and space vehicle manufacturing

Company size

11 - 50 Employees

Headquarters location

Washington, DC, US

Year founded

2013