My Colorado Journey
Back to pathway map
CybersecurityTop JobColorado Talent Pipeline Report-aligned occupation with strong annual openings, growth, and wage signals.

Vulnerability Assessment Analyst

Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.

Annual openings

553

BLS median wage

$135,220

Typical education

Flexible / varies by employer

10-year growth

+19%

Career requirements

What does this career require?

The education, credentials, and on-the-job competencies Colorado employers expect for this role.

Typical education

Flexible / varies by employer

Credential requirement

A credential is recommended.

Credential detail

Certifications addressing new attack vectors (emphasis on cloud computing technology, mobile platforms and tablet computers), new vulnerabilities, existing threats to operating environments, managing, maintaining, troubleshooting, installing, configuring basic network infrastructure.

Experience detail

Previous experience in information assurance, incident handling, vulnerability management and vulnerability analysis, or assistance programs.

Remote work

It is harder for these "red team" jobs to work remotely than many other IT jobs because of the need for onsite access to users and computer systems.

Is this work a fit?

What the work actually feels like

How people in this career tend to spend their time, the interests it draws on, and a look at a typical day.

Work style

  • With kids/peopleOccasionally
  • On a computerOccasionally
  • Outdoors / on-siteOccasionally
  • With your handsOccasionally

Interests it draws on

  • Technology
  • Cybersecurity

Automation exposure

Low exposure

Tasks here lean on judgement and people skills that are hard to automate.

A typical day

  1. Develop plans to safeguard computer files against accidental or unauthorized modification, destruction, or disclosure and to meet emergency data processing needs.
  2. Monitor current reports of computer viruses to determine when to update virus protection systems.
  3. Encrypt data transmissions and erect firewalls to conceal confidential information as it is being transmitted and to keep out tainted digital transfers.
  4. Perform risk assessments and execute tests of data processing system to ensure functioning of data processing activities and security measures.
  5. Modify computer security files to incorporate new software, correct errors, or change individual access status.
  6. Review violations of computer security procedures and discuss procedures with violators to ensure violations are not repeated.