Cyber Risk & Exposure Analyst (DoD TS/SCI)

Invictus International; Alexandria (VA); On-site; USD 90,000 - 120,000; Full time

Job summary

Invictus International is seeking a Cybersecurity Risk & Exposure Analyst to support DoD cyberspace operations. You will review vulnerability data, assist in SOC investigations, coordinate with ISSOs/ISSMs and system owners, and track remediation actions.

The role requires TS/SCI with CI polygraph eligibility and a DoD 8570 IAT II or IAM II certification, with 2+ years of cyber experience. The position emphasizes risk assessment, RMF security controls, and continuous-monitoring activities across

Qualifications

• Bachelor's degree in a technical discipline; 4 years may substitute for the degree
• Minimum two (2) years of relevant cybersecurity experience
• Strong written and verbal communication skills
• Knowledge of vulnerability management, asset/exposure analysis, RMF/security controls
• Experience with ACAS/Tenable, runZero or similar tools and STIG/SCAP
• Ability to coordinate findings with SOC personnel and system owners
• Active DoD 8570 IAT II or IAM II certification
• Experience in a DoD/IC environment is desired
• Current TS/SCI clearance with ability to obtain and maintain CI polygraph

Responsibilities

• Support operational cyber risk, vulnerability/exposure, and continuous-monitoring activities
• Review vulnerability data and asset information to identify weaknesses
• Assist in enriching SOC investigations with asset and vulnerability context
• Coordinate findings with SOC personnel, ISSOs/ISSMs, system owners, engineers, and remediation personnel
• Track vulnerabilities, POA&M items, and monitoring evidence
• Contribute to exposure and monitoring metrics and reporting
• Apply RMF concepts to connect findings with system security context
• Analyze vulnerabilities to determine risk, exploitation potential, and impact
• Support assessment and authorization activities as required

Skills

Vulnerability management

RMF/security controls

Risk assessment

Asset/exposure analysis

Technical communication

Documentation

SOC coordination

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

STIG Viewer

SCAP

POA&M processes

Job description

Invictus International is seeking a Cybersecurity Risk & Exposure Analyst to support DoD cyberspace operations. You will review vulnerability data, assist in SOC investigations, coordinate with ISSOs/ISSMs and system owners, and track remediation actions.

The role requires TS/SCI with CI polygraph eligibility and a DoD 8570 IAT II or IAM II certification, with 2+ years of cyber experience. The position emphasizes risk assessment, RMF security controls, and continuous-monitoring activities across