Toptal is an elite network of the world’s top talent, connecting the best and brightest in business, design, and technology with leading companies worldwide. We offer freelance opportunities on an independent contractor basis (note: we are unable to support C2C/C2H engagements or provide visa sponsorship).

We are hiring an IT Security Analyst for our client - one of the world’s leading social media platforms. This role requires deep expertise in vulnerability assessment, data management, and security frameworks to ensure the organization remains well-protected against emerging threats.

Key Responsibilities:

• Conduct vulnerability assessments using the CVSS standard as defined by FIRST.org.
• Utilize vector strings and vector chaining to evaluate risk.
• Analyze data to assess security risks across the organization.
• Identify vulnerabilities, assess reachability, and evaluate impact to prioritize security responses.
• Write Python scripts to manipulate data from sources such as CSV, Excel, JSON, and RESTful APIs.
• Apply the MITRE ATT&CK framework for attack path analysis.

Requirements:

• Mastery of CVSS, including environmental scoring and vector usage.
• Advanced proficiency in Python for data manipulation in a security context.
• Strong understanding of vulnerability impact, risk assessment, and mitigation strategies.
• Experience using the MITRE ATT&CK framework in practical security analysis.
• Proven ability to create dashboard-based reports to communicate security findings.
• Excellent communication skills and experience working with diverse stakeholders.

This is a contract-based opportunity. The role is hybrid, requiring 2–3 days/week onsite. It is open to talent based in New York, NY, Palo Alto, CA, or Bastrop, TX. The engagement is expected to last 6–12 months, with a commitment of 40 hours per week.

If this role piques your interest, we encourage you to apply and learn more about the opportunity— and about Toptal.