Senior Cybersecurity Threat & Vulnerability Analyst

Location:

Malvern, Pennsylvania Type:

Direct Hire Job #11626

Salary:

$

Location Type:

Hybrid Senior Cybersecurity Threat & Vulnerability Analyst Position Overview Our Cybersecurity organization plays a critical role in protecting enterprise systems, sensitive data, and business operations through advanced security capabilities, proactive threat detection, and risk-informed decision-making. We are seeking a Senior Cybersecurity Threat & Vulnerability Analyst to help strengthen our security posture by identifying emerging threats, analyzing sophisticated attack patterns, assessing vulnerabilities, and driving improvements across security technologies and processes. This role is ideal for a security professional with deep experience in threat analysis, offensive security, vulnerability assessments, and incident response who enjoys solving complex security challenges and partnering across technology teams to reduce cyber risk. The successful candidate will serve as a trusted security advisor, helping identify weaknesses before they become business-impacting events while contributing to the continuous evolution of enterprise security capabilities. Key Responsibilities Lead the investigation and response to complex cybersecurity alerts, incidents, and security investigations. Analyze sophisticated attack patterns, threat actor behaviors, and indicators of compromise to identify risks and recommend mitigation strategies. Monitor and evaluate emerging cybersecurity threats, vulnerabilities, attack techniques, and adversary tactics. Develop, maintain, and enhance security controls including detection rules, alerts, policies, signatures, and response capabilities. Perform security assessments using a variety of techniques including vulnerability analysis, penetration testing, threat modeling, and adversary simulation. Analyze security logs, network activity, application behavior, and other investigative data to identify malicious activity and potential compromises. Provide technical assessments and recommendations related to cybersecurity threats, vulnerabilities, and emerging technologies. Partner with technology and business teams to communicate findings, prioritize remediation efforts, and support enterprise security initiatives. Contribute to the continuous improvement of security operations processes, tools, and methodologies. Mentor and provide technical guidance to less experienced security professionals. Participate in cybersecurity projects and special initiatives as needed. Qualifications Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent combination of education and experience. 5+ years of cybersecurity experience, including significant experience in threat analysis, vulnerability management, or offensive security. Hands-on experience with offensive security disciplines including: Penetration testing Vulnerability assessments Web application security testing Threat modeling Adversary emulation Threat intelligence analysis Strong understanding of modern attack techniques, security vulnerabilities, and threat actor methodologies. Experience analyzing security events, logs, network traffic, and investigative data. Ability to translate technical security findings into clear business risks and actionable recommendations. Strong collaboration and communication skills with the ability to partner effectively across technical and business teams. Preferred Qualifications Industry certifications such as: Offensive Security Certified Professional (OSCP) Offensive Security Web Expert (OSWE) Certified Ethical Hacker (CEH) GIAC certifications Other equivalent security certifications Experience working in large-scale enterprise security environments. Experience with security operations platforms, vulnerability management tools, and threat intelligence technologies.