Advanced Cyber Risk & Exposure Analyst II

Invictus International Consulting, LLC.; Colorado Springs (CO); On-site; USD 90,000 - 120,000; Full time

Job summary

Invictus International Consulting, LLC. seeks a Cybersecurity Risk & Exposure Analyst II in Colorado Springs to perform vulnerability and exposure analysis, coordinate with ISSOs and remediation teams, and support RMF assessments.

The role requires DoD/IC experience, ACAS/Tenable/runZero proficiency, and an active TS/SCI clearance with CI polygraph eligibility. You will analyze system security, contribute to continuous monitoring, and develop repeatable procedures for investigations and risk

Qualifications

• Bachelor's degree in a technical discipline; an additional 4 years of experience may substitute a degree.
• Minimum four years of relevant experience beyond education
• Strong written and verbal communication skills
• Demonstrated knowledge of vulnerability management, asset/exposure analysis, RMF/security controls, and risk assessment
• Experience with ACAS/Tenable, runZero or comparable asset-discovery/exposure tools, DoD STIG/STIG Viewer, SCAP, POA&M processes or comparable technologies
• Current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment
• Current TS/SCI clearance with the ability to obtain and maintain a CI polygraph

Responsibilities

• Independently perform operational vulnerability/exposure analysis and continuous-monitoring activities supporting SOC investigations and cyber risk prioritization
• Correlate ACAS/Tenable findings, runZero asset context, STIG/configuration information and network telemetry to assess weaknesses
• Provide context to Cybersecurity Operations during investigations and proactive analysis; identify weaknesses contributing to exploitation or risk
• Coordinate SOC findings with ISSOs/ISSMs, system owners, administrators, and remediation teams to validate assets and determine remediation
• Analyze recurring vulnerabilities and exposure patterns to identify remediation priorities
• Develop and maintain checklists, procedures, and metrics for exposure analysis and remediation validation
• Maintain records of findings, remediation status, risk decisions, tickets/actions
• Communicate risk in operational terms using DoD-relevant controls and architectures

Skills

Vulnerability management

DoD RMF/security controls

Technical risk assessment

Communication skills

Education

Bachelor's degree in a technical discipline

Tools

ACAS

Tenable

runZero

STIG Viewer

SCAP

POA&M processes

Job description

Invictus International Consulting, LLC. seeks a Cybersecurity Risk & Exposure Analyst II in Colorado Springs to perform vulnerability and exposure analysis, coordinate with ISSOs and remediation teams, and support RMF assessments.

The role requires DoD/IC experience, ACAS/Tenable/runZero proficiency, and an active TS/SCI clearance with CI polygraph eligibility. You will analyze system security, contribute to continuous monitoring, and develop repeatable procedures for investigations and risk