Vulnerabilty Analyst

Xai

Palo Alto +3 more

On-siteCareer-pivot friendly

Who this role is best for

Strong fit for technical security professionals who apply CVSS and MITRE ATT&CK frameworks in dynamic environments and collaborate across teams.

Best fit for

Candidates with hands-on security analysis experience and automation skills in Python
— “Writing Python scripts to manage and manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs.”
Individuals who have conducted risk evaluations using CVSS and vector chaining
— “Conducting vulnerability assessments using the CVSS standard as defined by First.org.”
Professionals adept at translating technical findings into stakeholder-focused dashboards
— “Experience creating dashboard-based reports to communicate security findings.”

Things to consider

U.S. citizenship or residency is required due to ITAR export regulations.
— “To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national...”
The role demands direct contribution to the company’s mission in a fast-paced, high-growth environment.
— “Our small but fast-paced team values innovation and creativity.”

How to stand out

Highlight your ability to build agentic workflows for vulnerability management in your resume.
— “Experience building agentic workflows for vulnerability management.”
Showcase your MITRE ATT&CK attack path analysis projects in interviews.
— “Applying MITRE ATT&CK framework for attack path analysis.”
Demonstrate your stakeholder communication success with concrete examples.
— “Engaging with stakeholders across the organization to ensure security buy-in.”

Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

assessing and mitigating security risks
creating data reporting solutions

Typical background

vulnerability managementdata analysissecurity frameworks

Skills & requirements

Required

Vulnerability AssessmentData AnalysisPython ScriptingMitre Att&ck FrameworkSecurity Automation

Preferred

Elastic/opensearchKibana/grafanaAws/gcp

Stack & domain

PythonCVSSMitre Att&ck FrameworkCommunicationStakeholder ManagementSecurityData Analysis

About the role

Original posting from Xai via Greenhouse

SpaceXAI’s mission is to create AI systems that can accurately understand the universe and aid humanity in its pursuit of knowledge. Our team is small, highly motivated, and focused on engineering excellence. This organization is for individuals who appreciate challenging themselves and thrive on curiosity. We operate with a flat organizational structure. All employees are expected to be hands-on and to contribute directly to the company’s mission. Leadership is given to those who show initiative and consistently deliver excellence. Work ethic and strong prioritization skills are important. All employees are expected to have strong communication skills. They should be able to concisely and accurately share knowledge with their teammates.
ABOUT THE ROLE:
The Vulnerability Management team is responsible for assessing and mitigating security risks across our portfolio. This role will focus on vulnerability analysis and risk assessment, ensuring the organization is well-protected against emerging threats. The ideal candidate will have deep expertise in vulnerability scoring, data analysis, and automation.
RESPONSIBILITIES:
In this role, you’ll be responsible for evaluating vulnerabilities and determining their impact based on industry standards. You’ll work closely with cross-functional teams to improve security posture and integrate best practices. Your role will include:
Conducting vulnerability assessments using the CVSS standard as defined by First.org.
Understanding and implementing vector strings and vector chaining for risk evaluation.
Performing data analysis to assess security risks across the organization.
Identifying vulnerability reachability and impact to prioritize security responses.
Writing Python scripts to manage and manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs.
Applying MITRE ATT&CK framework for attack path analysis.
Creating data reporting solutions, including simple dashboards.
Engaging with stakeholders across the organization to ensure security buy-in.
Demonstrating strong critical analysis, problem-solving, and security expertise.
BASIC QUALIFICATIONS:
You are a highly skilled Vulnerability Analyst with deep expertise in vulnerability assessment, data management, and security frameworks. You have strong analytical skills and a keen ability to evaluate risk. The ideal candidate will also have:
Mastery of CVSS and its environmental processing.
Expertise in Python for security data manipulation.
Strong understanding of vulnerability impact, risk assessment, and mitigation strategies.
Proficiency with MITRE ATT&CK framework for security analysis.
Experience creating dashboard-based reports to communicate security findings.
Excellent communication and stakeholder management skills.
PREFERRED SKILLS AND EXPERIENCE:
Experience with Elastic/OpenSearch.
Familiarity with Kibana/Grafana dashboarding.
Development of security automation playbooks.
Experience with AWS and/or GCP.
Experience building agentic workflows for vulnerability management.
Our small but fast-paced team values innovation and creativity. You'll have the opportunity to make a significant impact on the future and our aspiration to build the Everything App. If you thrive in a dynamic, high-growth tech environment and relish the opportunity to collaborate with passionate, driven over-achievers, your career with us will be both exhilarating and fulfilling.
COMPENSATION AND BENEFITS:
$100,000 - $258,000 USD
Base salary is just one part of our total rewards package at SpaceXAI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.
ITAR REQUIREMENTS:
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
SpaceXAI is an equal opportunity employer. For details on data processing, view our Recruitment Privacy Notice.

Source: Xai careers (Greenhouse)