vulnerability researcher

Virtu Thinko

Role Summary: The Vulnerability Management Engineer will oversee continuous vulnerability scanning, assessment, and reporting across cloud and on-premises environments using Qualys or equivalent tools.Key Responsibilities:<ul><li>Conduct regular vulnerability scans and assessments.</li><li>Prioritize vulnerabilities based on CVSS scores and risk factors.</li><li>Coordinate with IT and application teams for remediation and validation.</li><li>Prepare vulnerability trend and risk posture reports.</li><li>Ensure compliance with regulatory and internal security requirements.</li></ul>Qualifications &amp; Skills:<ul><li>Bachelor&rsquo;s degree in Information Security or related discipline.</li><li>3&ndash;5 years of experience in vulnerability management or IT security.</li><li>Hands-on experience with Qualys, Tenable, or Rapid7 platforms.</li><li>Familiarity with patch management, risk assessment, and reporting.</li><li>Preferred certifications: CompTIA Security+, Qualys Certified Specialist.</li></ul>Job Types: Full-time, Contract Contract length: 12 monthsPay: BD800.000 - BD1,200.000 per month

Vulnerability Management Engineer

<div>Overview:
<div>
Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.</div><div> 
</div><div>As a Vulnerability Analyst working on the Department of Defense (DoD) network, your duties would encompass a wide range of responsibilities aimed at ensuring the security and integrity of sensitive information and systems.</div><div></div><div> 
Vulnerability Analysts conduct comprehensive assessments of computing systems, networks, and applications to identify and mitigate potential security risks. While leveraging cybersecurity methodologies, analysts analyze vulnerabilities, assess their impact, and collaborate with cross-functional teams to implement effective remediation plans of action with milestones. Seeks to protect and defend information and information systems by ensuring data confidentiality and integrity with non-repudiation, authentication, and availability of data and technology through assessments of control frameworks.</div><div></div><div> 
Vulnerability Analysts strategically plan, coordinate, scan, analyze, and report compliance of the Department of Defense Information Network (DoDIN) to its Cybersecurity Services customers on the SWA regional and theater level. Program: OMDAC-SWACA</div><div></div><div> 
This position offers company-paid housing and transportation, a completion bonus and tuition reimbursement program!</div><div></div><div> 
You must satisfy all host country requirements to legally work in the host country in order to be qualified for this position.</div>
Responsibilities:
<ul><li>Conduct regular security assessments and audits of information systems with the DoD SWA network.</li><li>
Develop and implement action plans to manage common vulnerabilities and exposures.</li><li>
Design report templates for daily use and distribution to customers and subordinate personnel to maintain at minimum a 95% overall vulnerability compliancy rating.</li><li>
Monitor Information Assurance Security Alerts &amp; Bulletins to detect and ensure rapid initial response to any cybersecurity related incident or event that could cause harm to the SWA AOR of the DoDIN.</li><li>
Maintain cross-communication with other cybersecurity division (e.g. IDS/IPS &amp; ArcSight) to discover attempts to exploit known and zero-day vulnerabilities.</li><li>
Recommend improvements to the overall cybersecurity posture.</li><li>
Possess the ability to communicate effectively with management and upper echelon military personnel to ensure information is disseminated timely and efficiently.</li><li>
Maintain working knowledge of vulnerability management systems (Tenable &amp; Nessus) Provides technical and operational support to functional end users of vulnerability tools (e.g. Assured Compliance Assessment Solution) ACAS and TYCHON.</li><li>
Prepares vulnerability scanning reports to submit to commanders and higher headquarters. Interfaces with the IAVM Manager and ISSO regarding vulnerability and remediation issues.</li><li>
Additional requirements may vary depending upon location.</li><li>
Performs other duties and assignments as required.</li></ul>
Qualifications:
<ul><li>Qualifications</li><li>
Security Clearance:
<ul><li>Requires an active Secret Clearance</li></ul></li><li>
Education / Certifications: One-year related experience can be substituted for one year of education if the degree is required.<ul><li>
Bachelor&rsquo;s Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.</li><li>
This position requires candidates to adhere to DoD 8570.01M. All candidates are required to maintain at least one (1) baseline certification and one (1) computing environment (CE) certification. Baseline certifications cannot also be used as a Computing Environment (CE) certification.</li><li>
The authorized certifications for this job title are listed as follows:</li></ul></li><li>
BASELINE:<ul><li>
Cisco: CCNP: Certified Network Professional - Security</li><li>
CompTIA: CASP+ ce: Advanced Security Practitioner</li><li>
GIAC: GCED: Certified Enterprise Defender</li><li>
GIAC: GCIH: Certified Incident Handler</li><li>
ISACA: CISA: Certified Information Systems Auditor</li><li>
ISC2: CCSP: Certified Cloud Security Professional</li><li>
ISC2: CISSP (or Associate): Certified Information Systems Security Professional</li><li>
ISC2: CCSP: Certified Cloud Security Professional</li></ul></li><li>
COMPUTING ENVIRONMENT (CE):<ul><li>
Cisco: CCIE: Certified Internetwork Expert (Any)</li><li>
Cisco: CCNP: Certified Network Professional (Any)</li><li>
EC Council: CEH: Certified Ethical Hacker</li><li>
EC Council: ECIH: Certified Incident Handler</li><li>
EC-Council: CHFI: Certified Hacking Forensic Investigator</li><li>
EC-Council: CND: Certified Network Defender</li><li>
GIAC: GCIH: Certified Incident Handler</li><li>
Microsoft: 365 Certified: Enterprise Administrator Expert</li><li>
Microsoft: Certified: Azure Associate (Any)</li><li>
Microsoft: Certified: Azure Expert (Any)</li><li>
Microsoft: MCSE: (Any above 2012)</li><li>
Red Hat: RHCA: Certified Architect</li><li>
Red Hat: RHCE: Certified Engineer</li><li>
Red Hat: RHSA: Certified Systems Administrator</li></ul></li><li>
Experience: One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a 4-year bachelor's degree in a Software Engineering or Business Information Systems discipline for three years general experience.<ul><li>
Requires a minimum of seven (7) years of experience in telecommunications sector.</li><li>
Experience with a customer service-oriented company.</li></ul></li></ul><h4 class="jobSectionHeader">
At V2X, we are deeply committed to both equal employment opportunity, including protection for Veterans and individuals with disabilities, and fostering an inclusive and diverse workplace. We ensure all individuals are treated with fairness, respect, and dignity, recognizing the strength that comes from a workforce rich in diverse experiences, perspectives, and skills. This commitment, aligned with our core Vision and Values of Integrity, Respect, and Responsibility, allows us to leverage differences, encourage innovation, and expand our success in the global marketplace, ultimately enabling us to best serve our clients. #Clearance #LI-KA</h4></div>

Vulnerability Analyst I - Secret Clearance

Teamficient

Penetration Tester / Ethical HackerCompany: TeamFicient Location: Pakistan (Remote / Hybrid) Employment Type: Full-Time or Contract Salary Range: To be discussed (Negotiable for highly experienced candidates)Work Schedule:<ul><li>Time Range: Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li>Working Hours: 9 hours per day (8 working hours + 1-hour break)</li><li>Days Off: TBD (2 days per week)</li></ul>Why Join Us?<ul><li>Competitive salary based on experience.</li><li>Opportunity to grow within an international, people-first organization.</li><li>Supportive work environment that values innovation, inclusion, and career growth.</li></ul>Position OverviewWe build an AI-powered MDR and GRC platform that collects logs, runs detections, and maps security and compliance controls.The Penetration Tester will secure our applications and client environments through authorized testing of web, API, cloud, and endpoint layers, helping convert findings into remediation tasks and audit evidence.Key Responsibilities<ul><li>Conduct authorized penetration tests (web, API, cloud, network, CI/CD).</li><li>Perform vulnerability scanning and manual validation of findings.</li><li>Develop non-destructive proof-of-concept exploits and document impact.</li><li>Produce detailed reports with risk ratings, CVSS scores, and recommendations.</li><li>Translate findings into engineering tickets and support re-tests.</li><li>Integrate SAST/DAST scanners into CI/CD pipelines.</li><li>Conduct periodic vulnerability assessments for demo and production environments.</li><li>Support audits (ISO 27001, SOC 2) with security evidence and training.</li></ul>Qualifications &amp; Must-Haves<ul><li>2&ndash;5 years of experience in penetration testing or red-team operations.</li><li>Strong web app / API testing skills (OWASP Top 10, SSRF, XSS, CSRF, authentication flaws).</li><li>Familiar with cloud security (Azure / AWS misconfigurations, IAM review).</li><li>Solid knowledge of Linux / Windows internals and networking fundamentals.</li><li>Familiar with CI/CD security and secret management.</li><li>Excellent report writing and collaboration skills.</li></ul>Preferred / Nice to Have:<ul><li>Certifications (OSCP, OSWE, eJPT, CEH) are preferred.</li><li>Experience with container security and CI/CD automation.</li><li>Understanding of compliance mapping (ISO 27001, SOC 2, NIST CSF).</li></ul>Tools &amp; Technologies:<ul><li>Nmap, Burp Suite, ZAP, Postman, Nessus, OpenVAS, Trivy, Metasploit (limited), GitHub Actions, SonarQube, ClickUp, Confluence, Google Docs</li></ul>Education:<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Cybersecurity, Computer Science, or Information Technology.</li><li>Advanced training or certifications in Ethical Hacking are recommended.</li></ul>Technical/System Requirements<ul><li>Desktop or laptop with Intel Core i7 / i9 or AMD Ryzen 7 / 9 (or higher) processor</li><li>Minimum 32GB RAM for multitasking and large file handling</li><li>NVIDIA RTX or AMD Radeon Pro graphics card (recommended)</li><li>Workstation free from noise and distractions</li><li>Stable primary internet connection and backup internet</li><li>USB headset with noise-cancelling microphone</li><li>Backup power source (generator, UPS, or accessible alternative workspace during outages)</li></ul>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.Join TeamFicient and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.Job Type: Full-timeApplication Question(s):<ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul>Work Location: Remote

(REMOTE) Penetration Tester / Ethical Hacker

Oracle

<div>Require vulnerability research, testing, code review. Security protocols, expert level Java and C skills.</div>
 <div>Must have: 10+ years of on platform security, security protocols and Java security model, expert on Java, C/C++ skills
 
Required: experience in incident resolution through bug analysis and code fixes; great communication skills, work with remote teams
 
Plus: Past research and submitted CVEs on Java security issues</div>

Software Developer

Finanz Informatik GmbH & Co. KG

Als einer der größten Banken-IT-Dienstleister und Digitalisierungspartner Europas sind wir der Treiber der Digitalisierung innerhalb der Sparkassen-Finanzgruppe. Mit über 5.000 Mitarbeiter:innen an 3 Standorten machen wir digitales Banking von heute leistungsfähig und entwickeln smarte Finanz-Services von morgen. Dabei bieten wir Ihnen ein breites Aufgabenspektrum . klicken sie bewerben, für die volle Stellenbeschreibung

Vulnerability Management Architect (m/w/d)

United Sol (Pvt.) Ltd

Conduct authorized security assessments against web, cloud, and infrastructure targets to identify vulnerabilities, verify exploitability, and deliver actionable remediation guidance.Responsibilities<ul><li>Plan and execute agreed penetration tests (web apps, APIs, cloud, networks) under rules of engagement.</li><li>Produce clear technical reports with risk rating, reproduction steps, and remediation recommendations.</li><li>Work with engineering teams to validate fixes and re-test.</li><li>Keep tools, techniques, and test methodology up to date; contribute to internal playbooks.</li></ul>Required<ul><li>3+ years in offensive security/penetration testing or red-team engagements.</li><li>Strong web app, network, and host testing experience; familiarity with common tools and manual testing techniques.</li><li>Experience producing clear technical and executive reports.</li><li>Bachelor&rsquo;s in CS/IT or equivalent experience.</li></ul>Desired<ul><li>OSCP, OSWE, CREST, eJPT or similar certification.</li><li>Experience with cloud (AWS/Azure/GCP) security testing.</li></ul>ComplianceAll work is strictly authorized and performed under approved scopes and legal agreements.Job Type: Full-timeWork Location: In person

Penetration Tester (Offensive Security)

Randstad Technologies

Senior User Researcher (Contract)The Role: Subject Matter Expert, User Researcher We are seeking a highly experienced, independent Senior User Researcher for a key contract position. This is a strategic role where you will act as a Subject Matter Expert (SME), driving optimal user experience across our digital products. You will be responsible for defining, executing, and synthesizing research that directly informs design and product strategy. This is a hybrid position requiring 3 days per week in our Newcastle office, working within a dynamic cross-functional environment. Contract Details This is a long-term contract opportunity requiring a hybrid presence in Newcastle (3 days in office). You will receive a generous holiday entitlement of 33 days (pro-rata). Key Responsibilities As a Senior User Researcher, you will operate independently and champion the user voice by: <ul> <li> Conducting End-to-End Research: Independently design, plan, and execute research using a wide array of methodologies, including in-depth user interviews, contextual inquiries, and usability testing. </li><li> Applying Mixed-Methods Mastery: Utilizing Advanced Proficiency in both Qualitative Research and Quantitative Research (e.g., surveys, analytics, A/B testing) to deliver holistic, actionable insights. </li><li> Creating Strategic Deliverables: Creating and maintaining critical user-centered artifacts, including detailed user personas and comprehensive journey maps, to align product strategy. </li><li> Providing Design Guidance: Offering expert guidance to cross-functional teams, ensuring all design concepts and prototypes meet the requirements for Responsive and Adaptive Design. </li><li> Stakeholder Advocacy: Actively participating in team discussions, presenting design concepts to stakeholders for review, and persuasively advocating for user needs and data-backed solutions. </li><li> Demonstrating Tool Expertise: Showcasing Advanced proficiency in User Experience Research Tools and Techniques to streamline research operations and analysis. </li></ul> What We're Looking For You are a seasoned researcher with a proven track record of operating autonomously and providing strategic direction. Essential Skills: <ul> <li> Extensive professional experience as a Senior User Researcher, UX Researcher, or Product Researcher. </li><li> Demonstrated expertise in applying both Qualitative and Quantitative Research methods to drive product decisions. </li><li> Strong practical knowledge of research and design principles related to Responsive and Adaptive Design. </li><li> Exceptional ability to synthesize data from various sources into clear, impactful, and easily understood narratives. </li><li> Ability to act as an independent Subject Matter Expert and provide creative solutions to complex product problems. </li><li> Excellent collaboration and communication skills for working with Product, Design, and Engineering teams. </li></ul> Mandatory Requirements: <ul> <li> Availability to work in Newcastle on a hybrid basis (3 days in office). </li><li> Must be eligible to pass any necessary pre-employment background checks. </li></ul> Randstad Technologies is acting as an Employment Business in relation to this vacancy.

User Researcher

Search 343+ Vulnerability researcher jobs near you this November. New roles added regularly across leading industries. Apply today.