Know ATS Score
CV/Résumé Score
  • Expertini Resume Scoring: Our Semantic Matching Algorithm evaluates your CV/Résumé before you apply for this job role: Vulnerability Analyst — External Attack Surface & VDP.
United States Jobs Expertini

Urgent! Vulnerability Analyst — External Attack Surface & VDP Job Opening In Charlotte – Now Hiring Vanguard

Vulnerability Analyst — External Attack Surface & VDP



Job description

We’re seeking a hands-on Vulnerability Analyst to validate, analyze, and prioritize vulnerabilities discovered across our External Attack Surface Management (EASM) platform and Vulnerability Disclosure Program (VDP).

You’ll combine deep vulnerability analysis with adversarial testing skills to reproduce and triage issues, ensure accurate severity and ownership, and drive timely remediation with partner teams.

The ideal candidate has strong diagnostic instincts, excellent written evidence construction, and practical penetration testing experience.
*This Hybrid Role (in office Tues-Wed-Thurs) can be based in either Charlotte, NC, Dallas, TX, or Malvern, PA (HQ)**

What you’ll do

  • Validate & reproduce findings from EASM (internetexposed assets, misconfigurations, leaked services, weak crypto, open ports) and from VDP submissions (web, API, mobile, infrastructure).

    Use manual techniques and PT frameworks to confirm exploitability and business impact.

  • Right-size severity & priority using exploitability signals (e.g., public exploit, EPSS/KEV), control context, asset criticality, and exposure window; document rationale and evidence that developers and risk owners can act on.

  • Deduplicate, enrich & route findings to the correct owners; eliminate false positives; merge related signal (scanner output, logs, asset inventory, prior exceptions) and ensure single threaded tracking to closure.

  • Partner with secure business enablement & product teams to negotiate remediation paths and SLAs; propose compensating controls or layered fixes when “one-shot” remediation isn’tfeasible.

  • Partner on governance workflows for risk acceptances, rating overrides, and reacceptance cycles; ensure issues aging and SLAs are visible in our dashboards.

  • Close the loop with researchers (for VDP) through clear, respectful communications and crisp proof-of-fix retesting.

  • Continuously improve signal quality by tuning rules/policies, source inventories, and intake/playbooks; author repeatable runbooks for common vuln classes.

  • Contribute as an adversary when needed (mini-engagements) to validateedge case chains and confirm impact beyond tool output.

  • What you’ll bring

  • 3–5 years in vulnerability analysis, application/infrastructure security, red teaming, or penetration testing (internal or consulting).

  • Proven ability to validate complex issues (param tampering, authN/Z bypass, SSRF, injection, IDOR, misconfig, cloud/API exposures) and write concise, repeatable steps with screenshots/PoCs.

  • Experience with EASM (e.g., Censys, Defender EASM, Cortex Xpanse) and VDP/bug bounty platforms (e.g., HackerOne, Bugcrowd) and their triage mechanics.

  • Familiarity with enterprise VM & tracking (ServiceNow VR/IRM, Jira, Archer/Risk Register), and with platform scanners (Qualys/Tenable/Nessus/Burp/ZAP).

  • Working knowledge of cloud (AWS/Azure), web & API security, PKI/TLS hygiene, DNS, and internetexposed service hardening.

  • Scripting (Python/PowerShell/Bash) for repeatable validation and data wrangling; basic SQL helpful.

  • Exceptional written communication—capable of translating technical risk into actionable guidance and executive clarity.

  • Nice-to-have exposure

  • EPSS/KEVdriven prioritization, attack path/graph concepts, and risk quant inputs.

  • Cloud posture and SaaS posture signals (SSPM) that intersect with external exposure.

  • Building tuning logic for scanners and platform rules (e.g., policy libraries, discovery seeds, asset correlation).

  • Certifications such as OSCP, GWAPT, GPEN (or equivalent demonstrable skill) are a plus; CISSP nice-to-have.

  • What’s in it for you

  • A front row seat reducing real-world external risk—turning noisy findings into decisive action.

  • Growth pathways into pen testing, threat modeling/assurance, or VM program leadership.

  • Special Factors

    Sponsorship

    Vanguard is not offering visa sponsorship for this position.

    About Vanguard

    At Vanguard, we don't just have a mission—we're on a mission.

    To work for the long-term financial wellbeing of our clients.

    To lead through product and services that transform our clients' lives.

    To learn and develop our skills as individuals and as a team.

    From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

    How We Work

    Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection.

    We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.


    Required Skill Profession

    Computer Occupations



    Your Complete Job Search Toolkit

    ✨ Smart • Intelligent • Private • Secure

    Start Using Our Tools

    Join thousands of professionals who've advanced their careers with our platform

    Rate or Report This Job
    If you feel this job is inaccurate or spam kindly report to us using below form.
    Please Note: This is NOT a job application form.


      Unlock Your Vulnerability Analyst Potential: Insight & Career Growth Guide


    • Real-time Vulnerability Analyst Jobs Trends in Charlotte, United States (Graphical Representation)

      Explore profound insights with Expertini's real-time, in-depth analysis, showcased through the graph below. This graph displays the job market trends for Vulnerability Analyst in Charlotte, United States using a bar chart to represent the number of jobs available and a trend line to illustrate the trend over time. Specifically, the graph shows 61713 jobs in United States and 789 jobs in Charlotte. This comprehensive analysis highlights market share and opportunities for professionals in Vulnerability Analyst roles. These dynamic trends provide a better understanding of the job market landscape in these regions.

    • Are You Looking for Vulnerability Analyst — External Attack Surface & VDP Job?

      Great news! is currently hiring and seeking a Vulnerability Analyst — External Attack Surface & VDP to join their team. Feel free to download the job details.

      Wait no longer! Are you also interested in exploring similar jobs? Search now: .

    • The Work Culture

      An organization's rules and standards set how people should be treated in the office and how different situations should be handled. The work culture at Vanguard adheres to the cultural norms as outlined by Expertini.

      The fundamental ethical values are:
      • 1. Independence
      • 2. Loyalty
      • 3. Impartiality
      • 4. Integrity
      • 5. Accountability
      • 6. Respect for human rights
      • 7. Obeying United States laws and regulations
    • What Is the Average Salary Range for Vulnerability Analyst — External Attack Surface & VDP Positions?

      The average salary range for a varies, but the pay scale is rated "Standard" in Charlotte. Salary levels may vary depending on your industry, experience, and skills. It's essential to research and negotiate effectively. We advise reading the full job specification before proceeding with the application to understand the salary package.

    • What Are the Key Qualifications for Vulnerability Analyst — External Attack Surface & VDP?

      Key qualifications for Vulnerability Analyst — External Attack Surface & VDP typically include Computer Occupations and a list of qualifications and expertise as mentioned in the job specification. Be sure to check the specific job listing for detailed requirements and qualifications.

    • How Can I Improve My Chances of Getting Hired for Vulnerability Analyst — External Attack Surface & VDP?

      To improve your chances of getting hired for Vulnerability Analyst — External Attack Surface & VDP, consider enhancing your skills. Check your CV/Résumé Score with our free Tool. We have an in-built Resume Scoring tool that gives you the matching score for each job based on your CV/Résumé once it is uploaded. This can help you align your CV/Résumé according to the job requirements and enhance your skills if needed.

    • Interview Tips for Vulnerability Analyst — External Attack Surface & VDP Job Success
      Vanguard interview tips for Vulnerability Analyst — External Attack Surface & VDP

      Here are some tips to help you prepare for and ace your job interview:

      Before the Interview:
      • Research: Learn about the Vanguard's mission, values, products, and the specific job requirements and get further information about
      • Other Openings
      • Practice: Prepare answers to common interview questions and rehearse using the STAR method (Situation, Task, Action, Result) to showcase your skills and experiences.
      • Dress Professionally: Choose attire appropriate for the company culture.
      • Prepare Questions: Show your interest by having thoughtful questions for the interviewer.
      • Plan Your Commute: Allow ample time to arrive on time and avoid feeling rushed.
      During the Interview:
      • Be Punctual: Arrive on time to demonstrate professionalism and respect.
      • Make a Great First Impression: Greet the interviewer with a handshake, smile, and eye contact.
      • Confidence and Enthusiasm: Project a positive attitude and show your genuine interest in the opportunity.
      • Answer Thoughtfully: Listen carefully, take a moment to formulate clear and concise responses. Highlight relevant skills and experiences using the STAR method.
      • Ask Prepared Questions: Demonstrate curiosity and engagement with the role and company.
      • Follow Up: Send a thank-you email to the interviewer within 24 hours.
      Additional Tips:
      • Be Yourself: Let your personality shine through while maintaining professionalism.
      • Be Honest: Don't exaggerate your skills or experience.
      • Be Positive: Focus on your strengths and accomplishments.
      • Body Language: Maintain good posture, avoid fidgeting, and make eye contact.
      • Turn Off Phone: Avoid distractions during the interview.
      Final Thought:

      To prepare for your Vulnerability Analyst — External Attack Surface & VDP interview at Vanguard, research the company, understand the job requirements, and practice common interview questions.

      Highlight your leadership skills, achievements, and strategic thinking abilities. Be prepared to discuss your experience with HR, including your approach to meeting targets as a team player. Additionally, review the Vanguard's products or services and be prepared to discuss how you can contribute to their success.

      By following these tips, you can increase your chances of making a positive impression and landing the job!

    • How to Set Up Job Alerts for Vulnerability Analyst — External Attack Surface & VDP Positions

      Setting up job alerts for Vulnerability Analyst — External Attack Surface & VDP is easy with United States Jobs Expertini. Simply visit our job alerts page here, enter your preferred job title and location, and choose how often you want to receive notifications. You'll get the latest job openings sent directly to your email for FREE!