Cybersecurity Analyst III

The Cybersecurity Analyst III supports enterprise cybersecurity operations through vulnerability remediation and security incident ticket management. This role analyzes security findings, coordinates corrective actions with technical teams, validates remediation, and supports the investigation and resolution of security incidents.

The analyst works independently on routine and moderately complex assignments, maintains accurate ticket documentation, and escalates significant risks or complex investigations. This position requires technical troubleshooting skills, sound judgment, and consistent follow-through from initial assignment through verified closure.

Position Responsibilities

Vulnerability Analysis and Remediation

• Review vulnerability scan results and security configuration findings to determine affected assets, exposure, and required corrective actions.
• Prioritize assigned findings using exploitability, asset criticality, external exposure, threat activity, and established remediation requirements.
• Validate findings, investigate potential false positives, and identify asset owners responsible for corrective action.
• Create and maintain remediation tickets with clear technical details, recommended actions, ownership, and due dates.
• Coordinate patching, configuration changes, software upgrades, and removal of unsupported technologies with infrastructure, endpoint, network, and application teams.
• Perform approved remediation activities within assigned access and change management requirements.
• Verify remediation through rescanning, configuration review, or other technical evidence before closing findings.
• Track overdue vulnerabilities, document remediation barriers, and escalate unresolved exposures.
• Support assessment of newly disclosed and actively exploited vulnerabilities to identify affected systems and accelerate remediation.
• Document compensating controls and exception requests for review by the appropriate risk owner.

Security Incident Ticket Support

• Triage and investigate assigned security tickets involving suspicious emails, endpoint alerts, potentially compromised accounts, unauthorized software, and other security concerns.
• Gather relevant evidence from endpoint security tools, security logs, identity platforms, and user reports.
• Document investigative actions, affected assets, findings, and disposition in the ticketing system.
• Execute approved response procedures, including endpoint isolation, malicious file quarantine, and account containment actions, within delegated authority.
• Escalate high-severity incidents, suspected compromise, and investigations requiring advanced analysis to senior analysts or incident response personnel.
• Coordinate with users, service desk personnel, and technical teams to resolve security issues and restore normal operations.
• Follow established evidence handling, communication, and incident response procedures.
• Identify vulnerabilities or configuration weaknesses contributing to incidents and create follow-up remediation tasks.

Operational Support and Process Improvement

• Maintain accurate ticket status, ownership, supporting evidence, and closure notes.
• Meet established response and remediation timelines and communicate delays or dependencies promptly.
• Contribute to remediation dashboards, ticket metrics, and recurring operational reports.
• Develop and update troubleshooting guides, remediation instructions, and investigation playbooks.
• Identify recurring issues and recommend changes that reduce repeat vulnerabilities and security incidents.
• Use scripts and approved automation to streamline evidence collection, ticket updates, and remediation validation.
• Provide supporting evidence for security assessments, audits, and compliance activities., * Timely remediation and verified closure of assigned vulnerability findings.
• Accurate, complete, and actionable remediation and incident tickets.
• Consistent adherence to response timelines and escalation procedures.
• Effective coordination with system owners and technical support teams.
• Reduced recurrence of vulnerabilities and security issues within assigned areas.
• Reliable investigation quality and compliance with approved response procedures.

• Associate’s or bachelor’s degree in cybersecurity, information technology, or a related field, or equivalent professional or military experience.
• Three or more years of relevant cybersecurity or IT experience, including hands-on work with vulnerability remediation and security alert or incident triage.
• Experience using vulnerability assessment tools and interpreting findings to determine corrective actions.
• Working knowledge of Windows administration, endpoint security, patch management, networking, and identity and access controls.
• Experience investigating security events using endpoint telemetry, logs, or a security information and event management platform.
• Experience managing work through an enterprise ticketing platform.
• Ability to distinguish routine security issues from conditions requiring urgent escalation.
• Strong technical documentation, troubleshooting, communication, and organizational skills.
• Ability to manage multiple assigned tickets and coordinate effectively with technical teams and end users., * Experience with Microsoft Defender for Endpoint, Microsoft Defender Vulnerability Management, Microsoft Sentinel, Tanium, Tenable, Qualys, Rapid7, or comparable tools.
• Familiarity with Microsoft Intune, Microsoft Entra ID, Microsoft 365, Azure, and GCC High environments.
• Experience with Jira Service Management, ServiceNow, or comparable ticketing platforms.
• Working knowledge of Linux systems and common cloud security configurations.
• Experience using PowerShell, Python, or Kusto Query Language to support security operations.
• Familiarity with CMMC, NIST SP 800-171, and CIS Benchmarks.
• Experience supporting aerospace, defense, manufacturing, or other regulated environments.
• CompTIA Security+, CySA+, Microsoft Security Operations Analyst, or comparable certification., * Ability to work in an office environment (Constant)
• Required to sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard (Frequent), This position requires access to information that is subject to compliance with the International Traffic Arms Regulations (“ITAR”) and/or the Export Administration Regulations (“EAR”). In order to comply with the requirements of the ITAR and/or the EAR, applicants must qualify as a U.S. person under the ITAR and the EAR, or a person to be approved for an export license by the governing agency whose technology comes under its jurisdiction. Please understand that any job offer that requires approval of an export license will be conditional on AeroVironment’s determination that it will be able to obtain an export license in a time frame consistent with AeroVironment’s business requirements. A “U.S. person” according to the ITAR definition is a U.S. citizen, U.S. lawful permanent resident (green card holder), or protected individual such as a refugee or asylee. See 22 CFR § 120.15. Some positions will require current U.S. Citizenship due to contract

We don’t just build defense technology-we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian-but we’re not building history, we’re building what’s next.

If you’re ready to build technology that matters-with speed, scale, and purpose-there’s no better place to do it than AV., We don’t just build defense technology-we redefine what’s possible. As the premier autonomous systems company in the U.S., AV delivers breakthrough capabilities across air, land, sea, space, and cyber. From AI-powered drones and loitering munitions to integrated autonomy and space resilience, our technologies shape the future of warfare and protect those who serve.

Founded by legendary innovator Dr. Paul MacCready, AV has spent over 50 years pushing the boundaries of what unmanned systems can do. Our heritage includes seven platforms in the Smithsonian-but we’re not building history, we’re building what’s next.

If you’re ready to build technology that matters-with speed, scale, and purpose-there’s no better place to do it than AV.

Careers at AeroVironment (https://www.avinc.com/careers/our-team)