Position Summary

Strategic Operational Solutions (STOPSO) is seeking a Vulnerability Assessment Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Assess systems, networks, and web applications for vulnerabilities and validate corrective actions. The analyst conducts authorized testing within approved scope and documents findings that support risk reduction.

Essential Duties and Responsibilities
• Conduct vulnerability, network, and web application assessments using approved tools and rules of engagement.
• Analyze configurations, scan results, exploitability, and operational context; apply CVSS v3 to help prioritize findings.
• Document affected assets, evidence, risk, recommended remediation, and retest results in clear assessment products.
• Support Network Assistance Visits, Network Damage Assessments, and integrated assessments as assigned.
• Validate asserted remediation and track closure according to severity and program reporting requirements.
• Execute Persistent Penetration Testing only after required Army Penetration Testing Course completion and authorization.
• Perform other duties as assigned consistent with the position's responsibilities, qualifications, clearance, and authorized scope.

Required Qualifications

Education and Experience
• Minimum 3 years of documented relevant experience. Relevant vulnerability and web or network assessment experience, CVSS v3 proficiency, and ability to document and validate findings.
• DoD Cyber Workforce Framework (DCWF) Vulnerability Assessment Analyst, Intermediate proficiency. The current qualification matrix identifies this work role as 541; appointment will follow the Government-approved role mapping.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work. Document work-role appointment and qualification; maintain required residential qualification and continuing learning. A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 541 Intermediate: CEH(P), CPTE, Cloud+, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, RCCE Level 1, Security+.
• Completion of the Army Penetration Testing Course is required before executing Persistent Penetration Testing.

Knowledge, Skills and Abilities
• Demonstrated knowledge of Vulnerability assessment, web application and network testing, CVSS v3, evidence handling, remediation validation, and rules of engagement.
• Proficiency with ACAS, Burp Suite, approved scanning and assessment platforms, Wireshark, Windows, and Kali Linux appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.

Preferred Qualifications
• Experience with authorized DoD assessment missions and remediation retesting.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Security Clearance

Active SECRET clearance and ability to maintain assigned system access. U.S. citizenship is required.

Supervisory Responsibilities

No formal supervisory responsibilities.

Work Environment and Physical Requirements

Work is primarily performed on site in a secure Government facility using computer systems and standard office equipment. The employee must be able to perform sustained computer-based analysis or coordination, communicate effectively, and support operational activities outside standard business hours when assigned. Mission-essential watch roles may include shifts, weekends, and holidays.

Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions of the position.

Travel

Occasional local, CONUS, or OCONUS travel may be required for authorized mission activities, exercises, assessments, or conferences.