Cybersecurity Assessment Data Analyst

Responsibilities

• Turn assessment, scan, asset, evidence, and remediation data into trusted operational insights

• Support penetration testing, red-team, and attack-surface evaluation through data analysis

• Ingest, normalize, reconcile, and quality-check data from assessment tools, scanners, APIs, repositories, tickets, operator evidence, and remediation workflows

• Develop repeatable data models, queries, scripts, metrics, dashboards, and reporting packages

• Show asset coverage, finding trends, attack paths, severity, remediation status, and delivery performance

• Correlate vulnerability and exposure data with CISA KEV, CVSS, EPSS, asset criticality, exploit evidence, threat context, and customer priorities

• Investigate duplicates, conflicting identifiers, missing fields, stale records, outliers, and reconciliation issues

• Document source lineage and metric definitions

• Build visualizations and executive summaries while preserving drill-down access to technical evidence and limitations

• Partner with assessment SMEs, technical writers, project management, and customer stakeholders on recurring and ad-hoc questions

• Automate recurring extracts, transformations, validation checks, and deliverables using source-controlled code and documented procedures

• Provide continuous technical assessment support for proactive testing of externally and internally visible federal cyber assets

• Conduct continual assessments of .gov domains, subdomains, and internet-facing assets to uncover exposures, validate vulnerabilities, and provide remediation guidance

Requirements

• U.S. citizenship is required

• Must meet eligibility requirements for access to sensitive information and be able to obtain a Public Trust fitness determination (High Risk)

• Ability to work in customer-provided remote environments, use customer-approved tools, and comply with rules of engagement, data-handling requirements, evidence controls, deconfliction procedures, and stop-work criteria

• Five or more years of data analysis, cybersecurity analytics, reporting, business intelligence, or data-engineering experience, including work with technical security data

• Strong SQL and Python skills

• Practical experience with data cleaning, joins, APIs, structured files, quality validation, reproducible analysis, and version control

• Experience building dashboards and reports in Power BI, Tableau, Splunk, Elastic, or comparable tools

• Working knowledge of vulnerability, asset, finding, evidence, ticket, and remediation data

• Knowledge of CVE, CVSS, CISA KEV, EPSS, false positives, and attack paths

• Ability to define metrics precisely, reconcile conflicting sources, explain limitations, and communicate results to technical and executive audiences

• Desired: Experience with exposure-management, attack-surface, penetration-testing, red-team, SIEM, data-lake, or security-orchestration data

• Desired: Experience with graph analytics, entity resolution, attack-path modeling, geospatial analysis, or large-scale internet asset data

• Desired: AWS/Azure data services, Databricks, Snowflake, Elasticsearch, Splunk, or API-integration experience

• Desired: Experience developing executive cyber-risk narratives, operational KPIs, SLA tracking, or remediation scorecards

• Desired: Relevant data, cloud, security, Power BI/Tableau, Splunk/Elastic, or GIAC certification

Core Competencies

Demonstrates expertise in data analysis and cybersecurity analytics, with strong capabilities in SQL and Python for data manipulation and reporting. Proficient in developing dashboards and visualizations using tools like Power BI and Splunk, while ensuring data quality and compliance with security standards.

Highest-signal resume keywords

• SQL

• Python

• Data Analysis

• Power BI

• Cybersecurity Analytics

Hard Skills

• Data Cleaning

• APIs

• Quality Validation

• Reproducible Analysis

• Version Control

• Dashboard Development

• Reporting

• Data Modeling

• Vulnerability Analysis

• Exposure Management

Soft Skills

• Communication

• Collaboration

• Problem-Solving

Certifications & Qualifications

• GIAC Certification

Industry Keywords

• CVE

• CVSS

• CISA KEV

• EPSS

• Penetration Testing

• Red Team

• SIEM

• Data Lake

• Security Orchestration

• Attack Path Modeling

Tools & Technologies

• Power BI

• Tableau

• Splunk

• Elastic

• AWS

• Azure

• Databricks

• Snowflake