[Remote] Vulnerability & Threat Analyst (US)

Note: The job is a remote job and is open to candidates in USA. VulnCheck is an exploit intelligence company that delivers structured intelligence on actively weaponized vulnerabilities and exploits. The Vulnerability & Threat Intelligence Analyst will analyze and validate threat intelligence related to exploited vulnerabilities, exploits, threat actors, malicious infrastructure, and indicators of compromise, while maintaining accurate and structured intelligence outputs. Responsibilities • Analyze diverse threat intelligence sources to identify and confirm: + Exploited vulnerabilities (KEVs) + Exploits and proof-of-concepts (PoCs) + Threat actors, Botnets and Ransomware campaigns + Malicious hosts, domains and infrastructure + Indicators of compromise (IOCs) • Validate the accuracy and credibility of sources and findings • Assess evidence of real-world exploitation • Maintain structured, high-quality intelligence outputs Skills • • Ability to evaluate exploit PoCs; familiarity with scripting languages • • Experience with OSINT tools and resources • • Understanding of IOCs and how to identify them • • Ability to assess the credibility and validity of intelligence sources • • Strong understanding of CVEs, including: • + CVE assignment and validation • + Familiarity with CPE and scoring methodologies • • Experience working with structured data formats (e.g., JSON) • • High attention to detail and analytical rigor • • Familiarity with end-of-life (EOL) software data • • Experience with developer/security tooling (e.g., VS Code and extensions) • • Familiarity with package ecosystems (NPM, NuGet, PyPI) • • Python scripting skills preferred • • Experience with prompt engineering is a plus Benefits • Unlimited PTO • 401k plan with company match • Comprehensive healthcare coverage • Generous paid parental leave • Remote friendly environment with flexibility • Expense reimbursement for Cell Phone & Internet • Ongoing professional development, coaching, and learning resources • Opportunities for career advancement within a fast-growing team Company Overview • VulnCheck provides vulnerability intelligence and exploit monitoring services for security teams. It was founded in 2021, and is headquartered in Lexington, Massachusetts, USA, with a workforce of 51-200 employees. Its website is https://vulncheck.com.