Security Test & Evaluation Analyst

Seeking a Security Test & Evaluation Analyst with hands-on experience applying AI to security testing, vulnerability assessment, control evaluation, and ethical hacking. The ideal candidate combines strong traditional security assessment expertise with experience using AI technologies to enhance testing, identify vulnerabilities, assess risk, and develop scalable security evaluation capabilities across on-premises and cloud environments., * Conduct comprehensive security assessments and ethical hacking activities, including reconnaissance, scanning, exploitation, and post-exploitation.

• Perform static and dynamic application testing, code reviews, architecture assessments, and security control evaluations.
• Design and implement AI-enabled security testing and assessment solutions and integrate AI capabilities into existing security processes.
• Analyze AI-generated and security-tool outputs to identify vulnerabilities, assess exploitability, and recommend remediation strategies.
• Conduct authenticated and unauthenticated security testing, including scenario-based and functional assessments.
• Develop requirements, technical designs, processes, and artifacts supporting AI-enabled security test and evaluation capabilities.
• Assess security risks across on-premises, cloud, applications, networks, and infrastructure.
• Collaborate with technical and business stakeholders to prioritize vulnerabilities and develop actionable remediation plans.
• Develop technical reports, metrics, and analytical products demonstrating security testing effectiveness.
• Ensure security testing and AI implementations comply with applicable NIST, FISMA, FedRAMP, OMB, and organizational requirements.

• 5+ years of security testing and evaluation experience using tools such as Tenable Nessus, GitLab, Fortify, Invicti, Mandiant, Kali Linux, and Wiz.
• 3+ years of cloud security testing experience across AWS, Azure, ServiceNow, or similar platforms.
• Demonstrated experience performing ethical hacking and penetration testing across the full assessment lifecycle.
• Hands-on experience implementing AI solutions for security testing and evaluation.
• Strong experience identifying, validating, and assessing vulnerabilities across applications, operating systems, networks, databases, APIs, and cloud environments.
• Knowledge of common attack vectors and vulnerabilities, including SQL injection, XSS, CSRF, and system/network weaknesses.
• Strong understanding of network protocols, security technologies, OS hardening, database security, and web application security.
• Experience working in government environments governed by NIST, FISMA, FedRAMP, and OMB guidance preferred.
• Strong analytical, problem-solving, communication, and technical documentation skills.