Vulnerability Intelligence Analyst (Remote Eastern US) - Mandiant Atlanta, GA Bookmark Share Print 141 1 1

Listing Description

Job Description

Mandiant Threat Intelligence seeks an experienced and motivated individual to be a member of our Vulnerability & Exploitation team, which is responsible for performing deep assessments of software and web application vulnerabilities, tracking exploit code releases and exploitation activities, and the creation of detailed and actionable reports in support of our global commercial and government customers. As a Vulnerability Intelligence Analyst, you will use your technical understanding to help our customers make sense of the thousands of new vulnerabilities that are disclosed each year and help them understand what they can do to protect against them. A successful candidate should have a fundamental understanding of vulnerabilities, what causes them, how an attacker could leverage them to perform malicious activities, and what organizations can do to mitigate them. Additionally, successful candidates should be self-motivated, willing to challenge themselves, and constantly striving for self-improvement.

Bottom line: You will help us do what we do best – protect the world from evil.

Responsibilities:

• Monitors public and proprietary sources for vulnerability information
• Performs deep assessment of vulnerabilities
• Researches and writes actionable reports
• Ensures the accuracy and integrity of information throughout reporting
• Responds to internal and external customer inquiries on vulnerabilities and related topics
• Reports changes to the state of existing vulnerabilities to internal team members
• Maintains subject matter expertise in assigned areas

• 3+ years of Computer Security work experience
• Basic understanding of different vulnerability types and common weakness enumeration (CWE)
• Familiarity with web application and/or OS-level vulnerability categories and documentation (OWASP, CVE)
• Strong writing skills with ability to communicate clearly and efficiently
• Strong interpersonal skills and ability to collaborate in a team environment
• Understanding of security and networking basics

Desired:

• Ability to communicate how an attacker would go about exploiting a vulnerability and what types of activity they could use it for
• Understanding of patch management and software development lifecycle (SDLC)
• Functional ability to write code using Python
• Experience reviewing and/or testing exploit code
• Experience developing functional exploit or proof-of-concept code
• Understanding of the general threat landscape and how vulnerabilities and their exploitation impact it

At Mandiant we are committed to our #OneTeam approach combining diversity, collaboration, and excellence. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.

This is a regionally-based role that must be located within Eastern or Central time zones