Senior Vulnerability Analyst, Horizon3

• As a remote first company, we require minimum 25Mbps consumer grade broadband connection
• Ideal candidates are well versed in the Security industry, responsible vulnerability disclosure programs and have experience publishing security communications (blogs, white papers, conference talks etc.)
• Hands‑on vulnerability research exposure, e.g., triage, root‑cause analysis, exploit reproduction/validation, or proof‑of‑concept evaluation
• 8+ years of experience in vulnerability analysis/research or cyber threat intelligence
• Active exploitation awareness, including how zero‑days/n‑days propagate, PoC weaponization trends, and defender impact
• Proven ability to work with discretion, handle sensitive information, and build trusted relationships
• Vulnerability ecosystem fluency: CVE/CWE, NVD/NIST, CISA KEV, EPSS, vendor advisories, and patch/mitigation lifecycles
• Familiarity with the penetration testing industry and vulnerability management ecosystems
• Outstanding communication and interpersonal skills; able to influence at all levels
• Exceptional organizational skills with the ability to manage multiple priorities and stakeholders
• Digital presence: experience using social channels and community forums to amplify research responsibly

Desirable

• We are seeking a Vulnerability Analyst or Cyber Threat Intelligence Analyst to act as our eyes and ears in the cyber security community, and to provide our customers with the latest information about the vulnerabilities NodeZero has been able to use against them
• You will also inform our customers and internal teams about emerging threats, threat actor behavior and trends, and help to prioritize our research. You will sit within the Rapid Response organization, reporting directly to the Director of Precision Defense
• Analyze the outcomes of NodeZero pentests to understand customer exposure to vulnerabilities and threats to inform our research prioritization
• Research, document and publish mitigation and remediation techniques for the most impactful vulnerabilities affecting our customers
• Monitor public vulnerability databases and threat intelligence sources to stay current on emerging threats
• Track product coverage for emerging vulnerabilities and drive communication updates for both internal and external partners
• Write, edit and publish public facing content about vulnerabilities
• Create internal content about vulnerabilities and threat actors to support Go To Market and Marketing teams at Horizon3.ai
• Collaborate cross-functionally with attack engineers, product managers, product marketing and customer teams