The Threat & Vulnerability Analyst will help Nominet reduce real-world cyber exposure across its critical services, cloud platforms, infrastructure, applications, suppliers and data systems. This is a hands-on analytical role that brings together vulnerability data, threat intelligence, attack-surface context and business criticality to identify what matters most and drive prioritised remediation action.
Responsibilities
Own vulnerability triage and exposure tracking, ensuring material weaknesses are assessed, prioritised and driven through to closure.
Monitor vulnerability data, threat intelligence, vendor advisories and known exploited vulnerabilities to identify emerging risks relevant to Nominet.
Assess exposure across cloud, applications, APIs, endpoints, identities, networks, infrastructure, suppliers and externally exposed services.
Prioritise remediation using exploitability, external exposure, asset criticality, service impact, attacker behaviour and business context.
Work with Technology, Engineering, service owners and suppliers to agree proportionate remediation or mitigation and track actions through to completion.
The Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.
Responsibilities
Develop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.
Identify product security risks and support security assessments and customer escalations.
Perform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.
Lead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
Establish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.
Support the government support team by implementing protections of government network infrastructure, identifying, analyzing, and mitigating vulnerabilities associated with HAIPE hardware and other network systems.
Compensation
We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
Responsibilities
Conduct comprehensive vulnerability assessments of systems and networks to identify deviations from security policies and standards.
Utilize industry-standard scanning tools (e.g., Nessus, Qualys, Rapid7) to identify and analyze security risks.
Configure, manage, and troubleshoot encryption devices to ensure secure and reliable operation.
Analyze and respond to digital evidence and threat intelligence to mitigate system and network vulnerabilities effectively.
Assess and vet findings from vulnerability disclosure programs (VDP) to prioritize and remediate security risks.
Requirements
Bachelor's degree in Cybersecurity or related field
Associate's degree with 5+ years of relevant experience
Responsible for prioritizing, quantifying, and managing cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact.
Responsibilities
Analyze and correlate data from vulnerability management platforms, red team and purple team exercises, threat intelligence and exploit trends, attack surface management tools
Identify and prioritize real-world exploitable risks
Model attack paths and exposure scenarios across identity, cloud environments, network and endpoint assets
Partner with Red and Blue teams to assess likelihood and impact of attack techniques
Align technical findings to enterprise risk tolerance
Requirements
Nice to have: Attack surface management tools
Nice to have: Breach and attack simulation tools
Nice to have: FAIR
Nice to have: Cloud risk management (AWS, Azure, GCP)
Lead complex vulnerability assessments and response activities across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Locations (2)
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands‑on technical investigation.
Lead organizational response to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance.
Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams.
IT Vulnerability Engineer III
Randolph Brooks Federal Credit Union · Posted Nov 6, 2026
Lead complex vulnerability assessments and response activities across hybrid infrastructure, driving remediation and automation to reduce exposure.
Locations (3)
San Antonio, Texas, United States
Live Oak, Texas, United States
Texas, United States
Responsibilities
Lead complex vulnerability assessments and exposure analysis across hybrid infrastructure, endpoints, networks, cloud platforms, containers, data platforms, and externally accessible services.
Validate and contextualize high-risk findings using exploit intelligence, attack-path analysis, asset criticality, business impact, compensating controls, and hands‑on technical investigation.
Lead organizational response to critical and emerging vulnerabilities, including impact analysis, scoping, stakeholder coordination, remediation strategy, executive updates, and closure assurance.
Design and maintain production‑quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting.
Requirements
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
Drive vulnerability triage, prioritization, exception analysis, remediation planning, escalation, retesting, and risk reporting across multiple technology teams.
Design and maintain production‑quality tooling, integrations, data pipelines, and automation for discovery, enrichment, normalization, deduplication, validation, ticketing, orchestration, and reporting.
Requirements
Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
Cyber Vulnerability Analyst (Encryptor Specialist)NewKoniag Government Services, LLC · Falls Church, US
IT Vulnerability Engineer IIIRandolph-Brooks Federal Credit Union · Live Oak, US+1 more