Risk/Vulnerability Analyst III - DoD
Leads cybersecurity vulnerability, risk, and software-assurance assessments supporting the Missile Defense Agency (TEAMS-Next CCRM program) at Schriever Space Force Base / Colorado Springs, CO. Requires 10+ years in cybersecurity, an active Secret clearance, and DoD 8570 IAT Level III; RMF/NIST, eMASS, and DevSecOps experience preferred.
- Compensation
- Not disclosed
- Location
- Colorado Springs, CO
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related technical field
- 10+ years of cybersecurity experience
- 5+ years of management, technical leadership, or team-lead experience
- Meet DoD 8570.01-M / IAT Level III requirements before starting
- Experience conducting or supporting cybersecurity, risk, vulnerability, or software assurance assessments or comparable RMF-related activities
- Ability to analyze technical and programmatic risk, perform gap analysis, and develop actionable recommendations
- Strong written and verbal communication, including technical reports and briefings for senior stakeholders
- Active Secret clearance with ability to obtain and maintain access up to TS/SCI
Nice to have
- Experience supporting DoD, Missile Defense Agency, or comparable federal cybersecurity programs
- Familiarity with Risk Management Framework, NIST guidance, cybersecurity controls, assessment procedures, and POA&M development or validation
- Experience with eMASS or similar authorization, compliance, or cybersecurity governance tools
- Experience with software assurance, code-analysis evidence, DevSecOps, CI/CD, vulnerability management, or security testing
- Relevant certifications such as Security+, CISSP, CISM, CASP+, or CCSP
Full description
Risk/Vulnerability Analyst III - DoD
We are seeking an experienced cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management (CCRM) program. The Risk/Vulnerability Analyst III leads cybersecurity compliance, risk-management, and independent assessment activities supporting MDA information systems and mission programs.
Job Description:
The successful candidate will lead data gathering, research, technical analysis, and assessment activities supporting cybersecurity vulnerability, software assurance, cyber risk, and cybersecurity posture baseline assessments. The role applies sound technical judgment to identify cybersecurity gaps, assess risk, develop recommended improvements, and help advance assessment processes and risk-management practices for MDA stakeholders.
Functional Responsibilities:
- Lead data collection, research, technical analysis, and reporting in support of threat, vulnerability, risk, and maturity assessments.
- Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
- Analyze cybersecurity evidence, identify control gaps and technical risks, and develop practical recommendations for remediation or risk reduction.
- Apply critical thinking and risk-management principles to assess complex cybersecurity issues and mission impacts.
- Develop and implement improvement plans for cybersecurity and risk-management processes.
- Prepare clear technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
- Lead or mentor junior analysts and contribute to team planning, technical quality, and continuous improvement.
- Support evolving assessment methods, automation opportunities, and process improvements consistent with customer requirements.
- Perform other related duties in support of contract requirements.
Work Location: Schriever Space Force Base / Colorado Springs, CO
Clearance Requirement: Active Secret clearance required; ability to obtain and maintain access up to TS/SCI, as required by assigned work
Education and Experience:
Minimum Education: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.
Minimum Experience: 10+ years of cybersecurity experience, including 5+ years of management, technical leadership, or team-lead experience.