Vulnerability & Threat Analyst (US)

Vulnerability & Threat Intelligence AnalystLocation: MA / Austin TX / MD Team: Research Employment Type: Full-Time, RemoteAbout VulnCheckExploitation prevention is only as strong as the intelligence driving those efforts, and most of the industry is still running on intelligence that lacks exploit context. VulnCheck, The Exploit Intelligence Company, delivers structured exploit intelligence on what is actively weaponized in the wild, purpose-built for the data lakes, ETL pipelines, automation, and AI and LLM workflows your infrastructure already runs on, raising the capability of everything it powers.About the RoleAre you a security researcher who enjoys analyzing large volumes of threat intelligence data to identify and validate exploited vulnerabilities, active exploits, threat actors, malicious infrastructure, and indicators of compromise (IOCs)?We are expanding our Threat Intelligence team and are looking for a detail-oriented analyst to join VulnCheck. This is a 100% remote role with preference for candidates located in Massachusetts, Maryland, OR Greater Austin TX. What You’ll DoAnalyze diverse threat intelligence sources to identify and confirm:Exploited vulnerabilities (KEVs)Exploits and proof-of-concepts (PoCs)Threat actors, Botnets and Ransomware campaignsMalicious hosts, domains and infrastructureIndicators of compromise (IOCs)Validate the accuracy and credibility of sources and findingsAssess evidence of real-world exploitationMaintain structured, high-quality intelligence outputsWhat You’ll BringAbility to evaluate exploit PoCs; familiarity with scripting languagesExperience with OSINT tools and resourcesUnderstanding of IOCs and how to identify themAbility to assess the credibility and validity of intelligence sourcesStrong understanding of CVEs, including:CVE assignment and validationFamiliarity with CPE and scoring methodologiesExperience working with structured data formats (e.g., JSON)High attention to detail and analytical rigorFamiliarity with end-of-life (EOL) software dataExperience with developer/security tooling (e.g., VS Code and extensions)Familiarity with package ecosystems (NPM, NuGet, PyPI)Preferred QualificationsPython scripting skills preferredExperience with prompt engineering is a plusIMPORTANT NOTE: This position may involve access to technology subject to U.S. export control regulations. Employment is contingent upon the company's ability to authorize access under applicable export control, sanctions, and any other applicable legal or contractual requirements. The company does not guarantee and is under no obligation to seek such authorization if it would be necessary.What We OfferWe believe people do their best work when they feel supported, trusted, and valued. VulnCheck offers benefits designed to meet a wide range of needs and lifestyles:Benefits and PerksUnlimited PTO401k plan with company matchComprehensive healthcare coverageGenerous paid parental leaveRemote friendly environment with flexibilityExpense reimbursement for Cell Phone & Internet Ongoing professional development, coaching, and learning resourcesOpportunities for career advancement within a fast-growing teamWhy Join UsBuilt on over two decades of cybersecurity experience, our team of experts understands the intricacies of vulnerabilities, their exploitation in the wild, and how to leverage this data to build more effective cybersecurity products that produce better outcomes for organizations.VulnCheck gives organizations a tactical advantage by providing best-in-class exploit & vulnerability intelligence information. We have a sense of duty to protect the critical infrastructure we rely on including medical devices, power grids and telecommunication networks. We were founded in 2021 in Lexington, Massachusetts.VulnCheck has a transparent, collaborative, and supportive culture - we are looking for people who have a growth mindset, are curious and innovative. Our team is smart, but humble, hardworking, and supportive.VulnCheck is proud to be an Equal Employer Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. VulnCheck is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. *Even if your experience doesn’t perfectly align with the job description, we encourage you to apply—we value potential just as much as a perfect resume.