Cybersecurity Assessment Data Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Transform assessment, scanning, asset, evidence, and remediation data into reliable operational insights.

• Assist in penetration testing, red-team exercises, and attack-surface evaluations through thorough data analysis.

• Ingest, normalize, reconcile, and perform quality checks on data sourced from assessment tools, scanners, APIs, repositories, tickets, operator evidence, and remediation workflows.

• Create repeatable data models, queries, scripts, metrics, dashboards, and reporting packages.

• Display asset coverage, identify trends, analyze attack paths, evaluate severity, monitor remediation status, and assess delivery performance.

• Correlate vulnerability and exposure data with CISA KEV, CVSS, EPSS, asset criticality, exploit evidence, threat context, and customer priorities.

• Examine duplicates, conflicting identifiers, missing fields, outdated records, outliers, and reconciliation discrepancies.

• Document source lineage and define metrics accurately.

• Develop visualizations and executive summaries while ensuring access to technical evidence and limitations.

• Collaborate with assessment subject matter experts, technical writers, project managers, and customer stakeholders on ongoing and ad-hoc inquiries.

• Automate repetitive extracts, transformations, validation checks, and deliverables utilizing source-controlled code and well-documented procedures.

• Offer continuous technical assessment support for proactive testing of both externally and internally visible federal cyber assets.

• Conduct ongoing assessments of .gov domains, subdomains, and internet-facing assets to identify exposures, validate vulnerabilities, and provide remediation recommendations.

⛳️ Requirements

• U.S. citizenship is required.

• Must meet eligibility criteria for accessing sensitive information and be capable of obtaining a Public Trust fitness determination (High Risk).

• Ability to operate in customer-provided remote environments, utilize customer-approved tools, and adhere to engagement rules, data-handling requirements, evidence controls, deconfliction protocols, and stop-work criteria.

• A minimum of five years of experience in data analysis, cybersecurity analytics, reporting, business intelligence, or data engineering, including work with technical security data.

• Proficient in SQL and Python.

• Hands-on experience with data cleaning, joins, APIs, structured files, quality validation, reproducible analysis, and version control.

• Experience in creating dashboards and reports using Power BI, Tableau, Splunk, Elastic, or similar tools.

• Familiarity with vulnerability, asset, finding, evidence, ticket, and remediation data.

• Understanding of CVE, CVSS, CISA KEV, EPSS, false positives, and attack paths.

• Ability to define metrics accurately, reconcile conflicting sources, articulate limitations, and communicate findings to both technical and executive audiences.

• Desired: Experience with exposure management, attack surface analysis, penetration testing, red team operations, SIEM, data lakes, or security orchestration data.

• Desired: Familiarity with graph analytics, entity resolution, attack path modeling, geospatial analysis, or large-scale internet asset data.

• Desired: Experience with AWS/Azure data services, Databricks, Snowflake, Elasticsearch, Splunk, or API integration.

• Desired: Background in developing executive cyber-risk narratives, operational KPIs, SLA tracking, or remediation scorecards.

• Desired: Relevant data, cloud, security, Power BI/Tableau, Splunk/Elastic, or GIAC certification.

🏝️ Benefits

• Flexible time off benefit.

• Robust learning resources.

• Healthcare benefits.

• Wellness benefits.

• Financial benefits.

• Retirement benefits.

• Family support benefits.

• Continuing education benefits.

• Time off benefits.

• Competitive compensation.

• Learning and development opportunities.