Vulnerabilty Analyst
About this role
The Vulnerability Management team at xAI builds security solutions to assess and mitigate risks across the company's portfolio of artificial intelligence systems. New team members focus on vulnerability analysis, data management, and risk assessment to protect the organization against emerging security threats. Personnel evaluate vulnerabilities using industry standards, perform data analysis, and write automation scripts using Python.
This role exists to ensure the organization remains secure while scaling its operations under a flat organizational structure. Ideal candidates possess deep technical expertise in vulnerability scoring, strong prioritization skills, and the ability to communicate technical findings clearly to cross-functional stakeholders. Hands-on contributors who thrive in fast-paced environments and demonstrate strong initiative succeed well in this position.
What you will do
- Conduct thorough vulnerability assessments using the CVSS standard.
- Implement vector strings and vector chaining to evaluate organizational risk.
- Perform detailed data analysis to identify security risks and vulnerability reachability.
- Write Python scripts to manage and manipulate data from various file formats and APIs.
- Apply the MITRE ATT&CK framework to analyze potential attack paths.
- Create dashboard-based reporting solutions to communicate findings to stakeholders.
What you need
- Demonstrate mastery of CVSS and its environmental processing.
- Possess expertise in Python for security data manipulation.
- Show a strong understanding of vulnerability impact, risk assessment, and mitigation strategies.
- Apply proficiency with the MITRE ATT&CK framework for security analysis.
- Build dashboard-based reports to effectively communicate security findings.
- Exhibit excellent communication and stakeholder management skills.
Nice to have
- Experience with Elastic/OpenSearch
- Familiarity with Kibana/Grafana dashboarding
- Development of security automation playbooks
- Experience with AWS and/or GCP
- Experience building agentic workflows for vulnerability management
Benefits
- Equity
- Comprehensive medical, vision, and dental coverage
- Access to a 401(k) retirement plan
- Short and long-term disability insurance
- Life insurance
- Various other discounts and perks
Skills and tech stack
Questions candidates ask
What is the salary range for this position?
The base salary ranges from $100,000 to $258,000 USD. Base salary is just one part of the total rewards package.
Where is the position located?
The role is available in Palo Alto, CA; Austin, TX; New York, NY; and Washington, DC. All employees are expected to be hands-on.
What technical skills are required for the role?
Candidates need mastery of CVSS, expertise in Python for security data manipulation, and proficiency with the MITRE ATT&CK framework. Experience creating dashboard-based reports is also necessary.
Are there any citizenship or residency requirements?
To conform to U.S. Government export regulations, applicants must be a U.S. citizen or national, a U.S. lawful permanent resident, a refugee, an asylee, or be eligible to obtain the required authorizations from the U.S. Department of State.