Cyber Risk & Exposure Analyst (DoD TS/SCI)

Invictus International; Colorado Springs (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Invictus International seeks a Cybersecurity Risk & Exposure Analyst with TS/SCI clearance to support DoD/IC security operations. You will analyze vulnerabilities, treat exposures, and coordinate remediation with system owners and ISSOs/ISSMs to strengthen risk posture.

The role requires DoD 8570 IAT II/IAM II readiness, strong written communication, and experience with ACAS/Tenable and asset discovery tools. A bachelor’s degree and related cybersecurity experience are essential.

Qualifications

• Bachelor's degree in a technical discipline; additional 4 years may substitute for degree.
• Minimum two years of cybersecurity experience beyond education.
• Strong written and verbal communication skills; ability to document technical work clearly.
• Knowledge of vulnerability management, asset and exposure analysis, DoD continuous monitoring, RMF and security controls.
• Experience with ACAS/Tenable, runZero or similar asset-discovery/exposure tools; STIG/SCAP; POA&M processes.

Responsibilities

• Support operational cyber risk, vulnerability/exposure, and continuous-monitoring activities for SOC watch operations and stakeholders.
• Review vulnerability data, asset info, STIGs, and documentation to identify weaknesses and asset context.
• Assist in enriching SOC investigations with asset and vulnerability information and documented controls.
• Coordinate findings with SOC personnel, ISSOs/ISSMs, system owners and remediation teams; maintain records of findings and actions.
• Track vulnerabilities, remediation actions, and POA&M items; collect continuous-monitoring evidence.
• Contribute to exposure, vulnerability, and monitoring metrics and reporting for risk reduction.
• Apply networking, OS, vulnerability, security controls, and RMF concepts to connect findings with security context.
• Analyze vulnerabilities to determine risk, exploitation scenarios, affected assets, and operational impact.
• Support metrics, customer reporting, and A&A activities as required.

Skills

Vulnerability management

Asset exposure analysis

RMF security controls

Technical risk assessment

Written and verbal communication

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

STIG/SCAP

POA&M processes

Job description

Invictus International seeks a Cybersecurity Risk & Exposure Analyst with TS/SCI clearance to support DoD/IC security operations. You will analyze vulnerabilities, treat exposures, and coordinate remediation with system owners and ISSOs/ISSMs to strengthen risk posture.

The role requires DoD 8570 IAT II/IAM II readiness, strong written communication, and experience with ACAS/Tenable and asset discovery tools. A bachelor’s degree and related cybersecurity experience are essential.