Cybersecurity Assessment Data Analyst

JobtailorRemote

Stellenbeschreibung:

Responsibilities

Turn assessment, scan, asset, evidence, and remediation data into trusted operational insights
Support penetration testing, red-team, and attack-surface evaluation through data analysis
Ingest, normalize, reconcile, and quality-check data from assessment tools, scanners, APIs, repositories, tickets, operator evidence, and remediation workflows
Develop repeatable data models, queries, scripts, metrics, dashboards, and reporting packages
Show asset coverage, finding trends, attack paths, severity, remediation status, and delivery performance
Correlate vulnerability and exposure data with CISA KEV, CVSS, EPSS, asset criticality, exploit evidence, threat context, and customer priorities
Investigate duplicates, conflicting identifiers, missing fields, stale records, outliers, and reconciliation issues
Document source lineage and metric definitions
Build visualizations and executive summaries while preserving drill-down access to technical evidence and limitations
Partner with assessment SMEs, technical writers, project management, and customer stakeholders on recurring and ad-hoc questions
Automate recurring extracts, transformations, validation checks, and deliverables using source-controlled code and documented procedures
Provide continuous technical assessment support for proactive testing of externally and internally visible federal cyber assets
Conduct continual assessments of .gov domains, subdomains, and internet-facing assets to uncover exposures, validate vulnerabilities, and provide remediation guidance

Requirements

U.S. citizenship is required
Must meet eligibility requirements for access to sensitive information and be able to obtain a Public Trust fitness determination (High Risk)
Ability to work in customer-provided remote environments, use customer-approved tools, and comply with rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria
Five or more years of data analysis, cybersecurity analytics, reporting, business intelligence, or data-engineering experience, including work with technical security data
Strong SQL and Python skills
Practical experience with data cleaning, joins, APIs, structured files, quality validation, reproducible analysis, and version control
Experience building dashboards and reports in Power BI, Tableau, Splunk, Elastic, or comparable tools
Working knowledge of vulnerability, asset, finding, evidence, ticket, and remediation data
Knowledge of CVE, CVSS, CISA KEV, EPSS, false positives, and attack paths
Ability to define metrics precisely, reconcile conflicting sources, explain limitations, and communicate results to technical and executive audiences
Desired: Experience with exposure-management, attack-surface, penetration-testing, red-team, SIEM, data-lake, or security-orchestration data
Desired: Experience with graph analytics, entity resolution, attack-path modeling, geospatial analysis, or large-scale internet asset data
Desired: AWS/Azure data services, Databricks, Snowflake, Elasticsearch, Splunk, or API-integration experience
Desired: Experience developing executive cyber-risk narratives, operational KPIs, SLA tracking, or remediation scorecards
Desired: Relevant data, cloud, security, Power BI/Tableau, Splunk/Elastic, or GIAC certification

Core Competencies

Demonstrates expertise in data analysis and cybersecurity analytics, with strong capabilities in SQL and Python for data manipulation and reporting. Proficient in developing dashboards and visualizations using tools like Power BI and Splunk, while ensuring data quality and compliance with security standards.