It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.
Risk and Vulnerability Threat Analyst I
Location
United States
Posted
4 days ago
Salary
0
Seniority
Mid Level
No structured requirement data.
Job Description
Risk and Vulnerability Threat Analyst I
ASM Research
Role Description The Risk and Vulnerability Threat Analyst I evaluates enterprise networks, systems, and applications to identify technical vulnerabilities and assess their impact on mission‑critical operations. This entry‑ to mid‑level role uses scanning tools, configuration reviews, and basic threat modeling to detect weaknesses, estimate risk, and support remediation planning in a highly regulated government environment. The analyst contributes to formal risk and vulnerability assessments, documenting findings and recommendations in clear terms for both technical and non‑technical stakeholders while aligning work to organizational cyber defense and compliance requirements. Key Responsibilities - Conduct vulnerability scans of servers, endpoints, cloud workloads, and network devices using common assessment platforms (such as Nessus, Qualys, or OpenVAS) and interpret results to identify exploitable weaknesses. - Review system and network configurations, access controls, and patch levels against security baselines and policies, documenting deviations and articulating risk impact and likelihood in clear, actionable language. - Apply foundational risk analysis and threat modeling concepts to prioritize remediation activities based on asset criticality, exploitability, and current threat intelligence for mission‑critical systems. - Support formal risk and vulnerability assessments and audits by gathering technical evidence, validating findings, and contributing to structured reports and remediation recommendations suitable for highly regulated government environments. - Collaborate with security operations and infrastructure teams to track remediation tasks, verify closure of findings, and refine vulnerability management processes, SLAs, and metrics over time. - Utilize basic scripting or automation (for example, Python or PowerShell) to normalize, correlate, and summarize vulnerability data from multiple tools and repositories for dashboards and executive reporting. - Maintain awareness of emerging vulnerabilities, common exploitation techniques, and security best practices in order to advise on control improvements and defense‑in‑depth strategies. Qualifications - Bachelor’s Degree in Computer Science or a related field, or equivalent relevant experience. - Typically 2–4 years of hands‑on experience in cybersecurity, information security, or IT systems administration, including exposure to vulnerability assessment and risk analysis activities. - Demonstrated experience using vulnerability scanning tools and interpreting results to support remediation in an enterprise environment. - Ability to communicate technical findings, risk implications, and remediation recommendations clearly to both technical and non‑technical audiences in a structured, documentation‑driven environment. - Ability to obtain and maintain any required background investigation associated with supporting highly regulated government environments. - U.S. Citizenship. Preferred Qualifications - Foundational security certification such as CompTIA Security+ or equivalent. - Intermediate cybersecurity certification such as CompTIA CySA+, CEH, or similar analysis or ethical‑hacking‑focused credential. - Experience supporting risk and vulnerability assessments in federal or other highly regulated government environments requiring U.S. citizenship. - Experience automating security or vulnerability‑management workflows using scripts, APIs, or BI/reporting tools. Compensation Ranges Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees. EEO Requirements It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies. All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment. Physical Requirements The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions. Disclaimer The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.
Related Guides
Related Categories
Related Job Pages
More Risk Jobs
Clinical Risk Manager
PrenuvoSaving lives with breakthrough proactive cancer & major disease screening
• Own the end-to-end management of patient clinical complaints and tickets. Critically assess each situation to determine the appropriate response path and level of escalation. • Make high-level decisions on when to involve legal counsel, clinical directors, radiology teams, or executive leadership, ensuring appropriate organizational alignment on high-stakes issues. • Manage the organization's active engagement with the Patient Safety Organization (PSO), ensuring rigorous adherence to quality privilege principles, systematic documentation within the Patient Safety Evaluation System (PSES), and the consistent protection of privileged safety information. • Conduct comprehensive clinical root-cause analyses and incident investigations to develop and implement proactive risk mitigation strategies. • Serve as the central point of contact for patient inquiries, fostering a balanced dialogue that prioritizes the patient perspective while maintaining objective clinical standards to drive effective and fair resolutions. • Partner with Nurse Practitioners, radiologists, and clinic staff to model and coach on empathetic, transparent communication strategies that facilitate resolution and maintain trust following incidents. • Champion the patient perspective across the organization, ensuring clinical quality improvements are informed by patient feedback and consistently result in safer, clearer, and more satisfying patient experiences. • Document investigation findings, risk assessments, and corrective actions with meticulous accuracy under the direction of legal counsel, maintaining strict confidentiality. • Perform regular chart audits and reviews of Nurse Practitioner consults to identify potential risk vulnerabilities or systemic process gaps. • Analyze complaint and incident data to identify operational trends, presenting actionable reports to management to drive continuous improvement.
Title: Director of Risk and Opportunity Location: Knoxville, TN Department: Program Management Job Description: If you are searching for the best new ideas and share our vision, join us as a "Director of Risk & Opportunity" This is what you need to know: Location: Knoxville, TN Salary: Highly Competitive Plus Benefits Contract: Permanent, full time Reporting to: Senior VP of Program Management Your role in the mission: The Director of Risk & Opportunity will serve as a key organizational leader responsible for defining, implementing, and maturing the enterprise-wide and program-level risk and opportunity management framework for Type One Energy. Operating as a central function within the Program Management Office (PMO), this individual will architect and manage the processes, systems, and governance structures that enable the company to effectively identify, assess, quantify, prioritize, track, and mitigate risks across all major programs—including Fusion Direct, Infinity1, and Infinity2. The Director will ensure that risk is translated into financial impact, enabling leadership to understand cost exposure, required reserves, and trade-offs required to deliver Infinity One on budget and on schedule. This role is critical in safeguarding the company’s capital efficiency strategy by proactively identifying, quantifying, and mitigating risks that could impact total project cost and delivery timelines In addition to leading the risk and opportunities approach, this role will include leading the “Design to Coat” initiatives across Fusion Direct to include Infinity1 and Infinity2. In this role, the design‑to‑cost leader will drive cost‑optimized product development by embedding cost‑focused thinking into engineering, design, supply chain, and program management processes. This role ensures products meet customer requirements at the lowest total cost, while maintaining performance, safety, and quality standards. This role will partner cross‑functionally to develop cost models, lead value engineering initiatives, and influence early‑stage design decisions that shape product cost and competitiveness. Risk & Opportunity Framework Development - Own and lead the risk and opportunity management function across Type One Energy, with primary focus on Infinity One program execution and construction. - Lead the development of a fully integrated cost risk framework - Establish risk management as a core decision-making discipline, embedded across engineering, construction, procurement, and program leadership - Serve as the central authority on programmatic risk posture, advising executive leadership on exposure, mitigation strategies, and trade-offs - Drive cost-risk trade-off analysis, enabling leadership to make informed decisions on design, procurement, and construction strategies. - Oversee the risk workflow including identification, analysis, quantification (qualitative and quantitative), prioritization, mitigation planning, and closure. Program-Level Risk Management - Facilitate working sessions with engineering, procurement, manufacturing, and operations teams to identify technical, schedule, cost, and integration risks. - Develop risk registers for major programs, ensuring clear traceability to program baselines and milestones. - Support Earned Value Management (EVM) performance analysis by correlating risk exposure with cost/schedule performance. - Conduct periodic risk reviews, readiness assessments, and risk health checks with program leadership. Quantitative Analysis & Modeling - Lead the development and execution of quantitative risk analyses (QRA) including Monte Carlo simulations for schedule and cost impacts. - Integrate results into baseline development, Estimate at Completion (EAC) models, and decision-making processes. - Provide data-backed recommendations to inform mitigation strategies and management reserves. Opportunity Management - Establish a structured opportunity management process to identify potential improvements in cost, schedule, performance, or design. - Work with engineering and operations leadership to evaluate opportunity feasibility, value, and implementation paths. - Track opportunity benefit realization and incorporate outcomes into program plans and performance reporting. Governance, Compliance & Continuous Improvement - Maintain risk governance processes aligned with contract, regulatory, and quality requirements. - Support major phase gate reviews, baseline reviews, and independent project assessments. - Drive continuous improvement of risk and opportunity management processes, tools, and cultural adoption across the company. Design to Cost Initiatives - Develop and lead the organization's Design‑to‑Cost strategy across programs and product lines. - Drive early‑phase cost planning during concept and architecture definition. - Provide executive‑level visibility to cost risks, opportunities, and trade‑offs. - Partner with Engineering, Product Management, Operations, Supply Chain, and Finance to integrate cost targets into requirements and design gates. - Identify key cost drivers and recommend actionable design changes or sourcing strategies. - Track and validate cost‑reduction performance against program targets. - Lead cost‑driven design reviews at key development milestones. What you’ll need: - Bachelor’s degree in engineering, physics, business, finance, or related field. - 10+ years of experience in risk management within complex engineering, R&D, aerospace, defense, or energy environments. - Demonstrated experience developing and managing risk registers, QRAs, and mitigation planning. - Demonstrated experience in construction-phase risk management and large program delivery - Strong understanding of project management, EVM, baselining, and systems engineering concepts. - Strong analytical skills with proficiency in risk analysis tools (e.g., @RISK, Primavera Risk Analysis, Safran Risk). Preferred - Experience in fusion energy, nuclear, or advanced energy systems. - Experience supporting PMO maturity efforts or process development. - Familiarity with DOE project management structures and risk requirements. - Certification in risk management (RMP, PMI-RMP) or project management (PMP) We offer: In addition to a basic salary and yearly bonus, you will also get… - A hybrid work policy - Stock options - Relocation allowance - Insurance plans - Retirement options - And many more great voluntary benefits Type One Energy applies proven advanced manufacturing methods, modern computational physics and high-field superconducting magnets to develop its optimized stellarator fusion energy system. Our FusionDirect development program pursues the lowest-risk, shortest-schedule path to a fusion power plant over the coming decade, using a partner-intensive and capital-efficient strategy. Type One Energy is committed to community engagement in the development and deployment of its clean energy technology. For more information, visit www.typeoneenergy.com or follow us on LinkedIn. Equal Opportunity Statement Type One Energy is an equal opportunity employer. We value diversity, searching for the best new ideas and remaining open to unique perspectives. Therefore, all qualified applicants will receive consideration for employment independent of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other characteristics protected by applicable federal, state, or local laws. All qualified individuals are encouraged to apply.
Quantitative Associate, Risk Analytics
Morgan StanleyMorgan Stanley is a global financial services company that was founded in 1935 and provides individuals and institutions with diverse investment products and se
Title: Quantitative Associate, Risk Analytics Location: New York, New York, United States of America Job Description: time type Full time job requisition id PT-JR040101 Company Profile Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments and individuals from more than 1,200 offices in 43 countries. As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence and strong team ethic. Morgan Stanley can provide a superior foundation for building a professional career - a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture. Firm Risk Management Morgan Stanley's Firm Risk Management (FRM) Division is an exciting and rapidly growing space. The division supports Morgan Stanley to achieve its business goals by partnering with business units across the Firm to realize efficient risk-adjusted returns, acting as a strategic advisor to the Board and protecting the Firm from exposure to losses as a result of credit, market, liquidity, operational, model and other risks. Background on the Position The role will reside within the Risk Analytics department in the Firm Risk Management division. Risk Analytics develops market risk, credit risk, and scenario analytics models, providing quantitative analysis of the Firm's risk exposures through mathematical and statistical techniques. Morgan Stanley is seeking an Associate/Analyst in its Market Risk Analytics group. The team develops, maintains, and monitors the performance of market risk models (e.g., VaR, Stressed VaR, IRC) and stress testing frameworks across asset classes, in line with regulatory requirements and internal risk management needs. The successful candidate will join a high-impact team working across model development, implementation, and analysis, with a focus on one or more of the following areas: > Market shock scenario design, stress testing and driving AI adoption, including scenario generation and stressed risk measurement > Commodity products market risk modeling, including quantitative analysis, capital calculation, and regulatory frameworks such as FRTB The role offers exposure to the full model lifecycle, including development, calibration, implementation, validation, performance monitoring, and regulatory engagement. The position also involves opportunities to enhance existing processes through automation and AI-driven solutions, contributing to the evolution of the Firm's risk management capabilities. Primary Responsibilities > Performing quantitative analysis on various aspects of Market Risk models like VaR, Stressed VaR, Risk Not in VaR for Commodity products (e.g. Power, Gas, Oil, etc.) > Developing and enhancing models for changing internal risk management needs, new regulatory requirements (e.g., FRTB), or improvements in capturing the risk > Supporting the design and implementation of market shock scenarios and stress testing methodologies, including scenario generation and stressed risk measurement > Identifying opportunities to enhance existing processes through automation and AI tools, and contributing to their development and deployment > Actively participating in code development for the purpose of model implementation, model performance monitoring, and for performing different analyses > Analyze, understand, and explain changes in risk metrics driven by model updates and position changes > Analyzing model performance metrics > Interacting with stakeholders from various departments like Front Office strategists, Market Risk Managers, Model Risk Management and FRM IT > Participating in documentation of model methodologies and implementation > Responding to queries from Model Risk Management, Internal Audit, and regulators Requirements > Requires a degree in Quantitative Finance, Math, Statistics, Computer Science, Physics, Engineering, Economics or a related field of study (Masters/PhD highly preferred) > Strong Quantitative skills > Strong Python coding skills (essential), knowledge of database querying functionalities/languages > Familiarity with statistical modelling, Monte Carlo, Historical Simulation > Knowledge of financial products with Commodity products will be preferred > Familiarity with stress testing frameworks and scenario design methodologies is preferred > Familiarity with AI tools and understanding of their strengths, limitations, and practical applications is preferred > Experience in developing or deploying analytical or AI tools is preferred > Knowledge and broad interest in financial products, markets, and risk management and regulations > Strong skills in communication, critical thinking, problem solving, and collaboration Firm Risk Management values diversity and is committed to providing a supportive and inclusive workplace for all employees. This role is hybrid and currently requires in office attendance 3 days/week. The in office requirement is subject to change at any time. WHAT YOU CAN EXPECT FROM MORGAN STANLEY: At Morgan Stanley, we raise, manage and allocate capital for our clients – helping them reach their goals. We do it in a way that’s differentiated – and we’ve done that for 90 years. Our values - putting clients first, doing the right thing, leading with exceptional ideas, committing to diversity and inclusion, and giving back - aren’t just beliefs, they guide the decisions we make every day to do what's best for our clients, communities and more than 80,000 employees in 1,200 offices across 42 countries. At Morgan Stanley, you’ll find an opportunity to work alongside the best and the brightest, in an environment where you are supported and empowered. Our teams are relentless collaborators and creative thinkers, fueled by their diverse backgrounds and experiences. We are proud to support our employees and their families at every point along their work-life journey, offering some of the most attractive and comprehensive employee benefits and perks in the industry. There’s also ample opportunity to move about the business for those who show passion and grit in their work. To learn more about our offices across the globe, please copy and paste https://www.morganstanley.com/about-us/global-offices into your browser. Expected base pay rates for the role will be between $100,000 and $140,000 year at the commencement of employment. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include commission earnings, incentive compensation, discretionary bonuses, other short and long-term incentive packages, and other Morgan Stanley sponsored benefit programs. Morgan Stanley is an equal opportunity employer committed to building and maintaining a workforce that is diverse in experience and background. Our recruiting efforts reflect our strong commitment to a culture of inclusion, where individuals are hired, developed, and advanced based on their skills and talents. Our workforce reflects a broad cross-section of the global communities in which we operate, bringing a variety of backgrounds, talents, perspectives, and experiences. For more information, please visit: https://www.morganstanley.com/people-opportunities/eeo.
Collateral Review Associate
SetpointFounded in 2021, Setpoint is a technology company based in Austin, Texas, that streamlines funding operations and loan sale processes to improve capital efficie
Collateral Review Associate (RTL) Location: - Salt Lake City, Utah - Park City, Utah Work Arrangement: Hybrid (Expected to work in the Salt Lake City office two days per week—Tuesdays and Thursdays. The role may also require working from the Park City office as needed.) Employment Type: Full-time About the role Behind many of life’s most important transactions — buying a house, applying for a mortgage, getting a small business loan, or refinancing a credit card — is a network of credit relationships. Setpoint provides critical infrastructure for relationships between the world’s largest banks, credit funds and capital markets counterparties. We’re building trust in this system of credit. Setpoint is looking for a Collateral Review Associate (RTL) to join our team! The Collateral Review Associate is part of our in-house due diligence team. This role is responsible for reviewing and validating loan package documentation and individual materials required by lenders to loan money related to single-family homes or multi-family properties to ensure accuracy, compliance, and completeness. They will collaborate with internal and external stakeholders and welcome the dynamic environment that comes with a fast-growing company. Who will love this job - An organizational wizard: You are organized and have exceptional attention to detail. - A great communicator: You possess excellent written and verbal communication skills. - A multi-tasker: You can manage multiple priorities and execute them effectively within their deadlines. - A problem-solver: You can quickly get to expert status in new areas, understand what’s most important, and solve problems. - A process driver: You can pick up complex systems and design repeatable solutions. What you’ll do - Conduct reviews of and validate loan package documentation and materials related to purchasing of property, documents include but are not limited to: credit, background, appraisal, title, HUD-1, flood cert, mortgage, note, guaranty, repair budgets, and entity documents. - Update internal web applications related to loan package materials and documentation. - Validate all materials have been updated in the system of record. - Perform daily operational audits for documentation requirements and data processing. - Provide assistance in communication with internal and external clients with questions or concerns on collateral. You should have - 3+ years’ experience in title, valuations, or mortgage loan underwriting. - Strong computer abilities including intermediate to advanced Excel skills, Microsoft Word, and experience with software interfaces. - Ability to work extended hours based on the flow needs of the client - this includes month end, quarter end, and year end increases in volume. - Knowledge of mortgage and business loans, including underwriting and documentation standards, valuation methodologies and secondary loan markets and servicing and monitoring practices. - Ability to work independently, prioritize, and plan work activities while also being effective in a group setting. - Ability to work in our Salt Lake City or Park City office as needed. About Setpoint Setpoint provides purpose-built capital and technology to asset-backed borrowers and lenders. Our platform is the funding operating system for originators: it verifies and stores documents; automates critical calculations and compliance reporting; and digitizes assets like homes or cars. Setpoint’s technology makes warehouse transactions instant and error free. In August 2024, Setpoint announced the successful completion of its $31 million Series B funding round. 645 Ventures led the round, with significant strategic investments from Citi and Wells Fargo, alongside Andreessen Horowitz, NextView Ventures, Floating Point, Henry Kravis, Zillow founder’s 75 & Sunny, Vesta Ventures, Fifth Wall, Eltura Ventures, and Outrunner Capital. We offer a comprehensive benefits package that includes competitive salaries, stock options, medical, dental, and vision coverage, 401(k), short term and long term disability coverage, and flexible vacation. We have offices in Austin, TX, New York City, NY, and Salt Lake City, UT with hybrid roles based in these locations and an expectation of two days a week in office (Tuesdays and Thursdays). Setpoint provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws

