Cybersecurity Analyst III

AeroVironment

. Review vulnerability scan results and security configuration findings to determine affected assets, exposure, and corrective actions .

Posted 11/2/2026full-timeUnited StatesMid-LevelSenior💰 $91,000 - $154,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability remediation, security incident triage, and technical documentation. Proficient in using vulnerability assessment tools and managing security operations within regulated environments.

Highest-signal resume keywords

Vulnerability RemediationSecurity Incident TriageTechnical DocumentationMicrosoft Defender for EndpointCompTIA Security+

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability Assessment ToolsWindows AdministrationEndpoint SecurityPatch ManagementPowerShellPythonKusto Query LanguageLinux SystemsNetworkingIdentity and Access Controls

Soft Skills

CommunicationOrganizational SkillsTroubleshootingCoordination

Tools & Technologies

Microsoft Defender Vulnerability ManagementMicrosoft SentinelTaniumTenableQualysRapid7Jira Service ManagementServiceNowMicrosoft IntuneMicrosoft Entra ID

Certifications & Qualifications

CompTIA Security+CySA+Microsoft Security Operations Analyst

Industry Keywords

CMMCNIST SP 800-171CIS BenchmarksAerospaceDefenseManufacturingRegulated EnvironmentsITAR/EAR Compliance

Tech Stack

Tools & technologies

AzureCloudCyber SecurityLinuxPythonServiceNow

About the role

Key responsibilities & impact

Review vulnerability scan results and security configuration findings to determine affected assets, exposure, and corrective actions
Prioritize findings based on exploitability, asset criticality, external exposure, threat activity, and remediation requirements
Validate findings, investigate false positives, and identify asset owners
Create and maintain remediation tickets with technical details, recommended actions, ownership, and due dates
Coordinate patching, configuration changes, software upgrades, and removal of unsupported technologies with technical teams
Perform approved remediation activities within assigned access and change-management requirements
Verify remediation through rescanning, configuration review, or other technical evidence
Track overdue vulnerabilities, document barriers, and escalate unresolved exposures
Support assessment of newly disclosed and actively exploited vulnerabilities
Document compensating controls and exception requests
Triage and investigate security tickets involving suspicious emails, endpoint alerts, compromised accounts, unauthorized software, and other security concerns
Gather evidence from endpoint tools, security logs, identity platforms, and user reports
Document investigative actions, affected assets, findings, and disposition in the ticketing system
Execute approved response procedures, including endpoint isolation, malicious file quarantine, and account containment
Escalate high-severity incidents and suspected compromise to senior analysts or incident response personnel
Coordinate with users, service desk personnel, and technical teams to resolve issues and restore operations
Follow evidence handling, communication, and incident response procedures
Identify vulnerabilities contributing to incidents and create follow-up remediation tasks
Maintain accurate ticket status, ownership, evidence, and closure notes
Meet response and remediation timelines and communicate delays or dependencies
Contribute to remediation dashboards, ticket metrics, and operational reports
Develop and update troubleshooting guides, remediation instructions, and investigation playbooks
Recommend process changes to reduce recurring vulnerabilities and incidents
Use scripts and approved automation for evidence collection, ticket updates, and remediation validation
Provide evidence for security assessments, audits, and compliance activities

Requirements

What you’ll need

Associate’s or bachelor’s degree in cybersecurity, information technology, or a related field, or equivalent professional or military experience
Three or more years of relevant cybersecurity or IT experience, including hands-on work with vulnerability remediation and security alert or incident triage
Experience using vulnerability assessment tools and interpreting findings to determine corrective actions
Working knowledge of Windows administration, endpoint security, patch management, networking, and identity and access controls
Experience investigating security events using endpoint telemetry, logs, or a security information and event management platform
Experience managing work through an enterprise ticketing platform
Ability to distinguish routine security issues from conditions requiring urgent escalation
Strong technical documentation, troubleshooting, communication, and organizational skills
Ability to manage multiple assigned tickets and coordinate effectively with technical teams and end users
Experience with Microsoft Defender for Endpoint, Microsoft Defender Vulnerability Management, Microsoft Sentinel, Tanium, Tenable, Qualys, Rapid7, or comparable tools
Familiarity with Microsoft Intune, Microsoft Entra ID, Microsoft 365, Azure, and GCC High environments
Experience with Jira Service Management, ServiceNow, or comparable ticketing platforms
Working knowledge of Linux systems and common cloud security configurations
Experience using PowerShell, Python, or Kusto Query Language to support security operations
Familiarity with CMMC, NIST SP 800-171, and CIS Benchmarks
Experience supporting aerospace, defense, manufacturing, or other regulated environments
CompTIA Security+, CySA+, Microsoft Security Operations Analyst, or comparable certification
Secret clearance
Must qualify as a U.S. person under ITAR/EAR or be eligible for an export license
U.S. Citizenship required

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401(k) with company matching
9/80 work schedule
Paid holiday shutdown