Vulnerabilty Analyst
Job description
<div class="content-intro"><p><span style="font-family: arial, helvetica, sans-serif;">SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. </span><span style="font-family: arial, helvetica, sans-serif;">Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. </span><span style="font-family: arial, helvetica, sans-serif;">We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. </span><span style="font-family: arial, helvetica, sans-serif;">All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.</span></p></div><h3 data-pm-slice="1 1 []"><span style="font-family: arial, helvetica, sans-serif;">ABOUT THE ROLE:</span></h3>
<p><span style="font-family: arial, helvetica, sans-serif;">The <strong>Vulnerability Management team</strong> is responsible for assessing and mitigating security risks across our portfolio. This role will focus on vulnerability analysis and risk assessment, ensuring the organization is well-protected against emerging threats. The ideal candidate will have deep expertise in vulnerability scoring, data analysis, and automation.</span></p>
<h3><span style="font-family: arial, helvetica, sans-serif;">RESPONSIBILITIES:</span></h3>
<p>In this role, you’ll be responsible for evaluating vulnerabilities and determining their impact based on industry standards. You’ll work closely with cross-functional teams to improve security posture and integrate best practices. Your role will include:</p>
<ul>
<li>Conducting vulnerability assessments using the CVSS standard as defined by First.org.</li>
<li>Understanding and implementing vector strings and vector chaining for risk evaluation.</li>
<li>Performing data analysis to assess security risks across the organization.</li>
<li>Identifying vulnerability reachability and impact to prioritize security responses.</li>
<li>Writing Python scripts to manage and manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs.</li>
<li>Applying MITRE ATT&CK framework for attack path analysis.<br>Creating data reporting solutions, including simple dashboards.</li>
<li>Engaging with stakeholders across the organization to ensure security buy-in.<br>Demonstrating strong critical analysis, problem-solving, and security expertise.</li>
</ul>
<h3><span style="font-family: arial, helvetica, sans-serif;">BASIC QUALIFICATIONS:</span></h3>
<ul>
<li>
<p>You are a highly skilled <strong>Vulnerability Analyst</strong> with deep expertise in vulnerability assessment, data management, and security frameworks. You have strong analytical skills and a keen ability to evaluate risk. The ideal candidate will also have:</p>
<ul>
<li>Mastery of CVSS and its environmental processing.</li>
<li>Expertise in Python for security data manipulation.</li>
<li>Strong understanding of vulnerability impact, risk assessment, and mitigation strategies.</li>
<li>Proficiency with MITRE ATT&CK framework for security analysis.</li>
<li>Experience creating dashboard-based reports to communicate security findings.</li>
<li>Excellent communication and stakeholder management skills.</li>
</ul>
</li>
</ul>
<h3><span style="font-family: arial, helvetica, sans-serif;">PREFERRED SKILLS AND EXPERIENCE:</span></h3>
<ul>
<li>Experience with Elastic/OpenSearch.</li>
<li>Familiarity with Kibana/Grafana dashboarding.</li>
<li>Development of security automation playbooks.</li>
<li>Experience with AWS and/or GCP.</li>
<li>Experience building agentic workflows for vulnerability management.</li>
</ul>
<p>Our small but fast-paced team values innovation and creativity. You'll have the opportunity to make a significant impact on the future and our aspiration to build the Everything App. If you thrive in a dynamic, high-growth tech environment and relish the opportunity to collaborate with passionate, driven over-achievers, your career with us will be both exhilarating and fulfilling.</p>
<h3><span style="font-family: arial, helvetica, sans-serif;"><strong>COMPENSATION AND BENEFITS:</strong></span></h3>
<p><span style="font-family: arial, helvetica, sans-serif;">$100,000 - $258,000 USD</span></p>
<p><span style="font-family: arial, helvetica, sans-serif;">Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.</span></p>
<h3><strong>ITAR REQUIREMENTS:</strong></h3>
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR <a href="https://www.pmddtc.state.gov/?id=ddtc_kb_article_page&sys_id=24d528fddbfc930044f9ff621f961987">here</a>. </li>
</ul><div class="content-conclusion"><p><em>SpaceXAI is an equal opportunity employer. For details on data processing, view our </em><em><a href="https://x.ai/legal/recruitment-privacy-notice" target="_blank">Recruitment Privacy Notice</a>.</em></p></div>