Cyber Risk & Exposure Analyst II - RMF & DoD Focus

Invictus International Consulting, LLC; Alexandria (VA); On-site; USD 135,000 - 165,000; Full time

Job summary

Invictus International Consulting, LLC seeks a Cybersecurity Risk & Exposure Analyst II in Alexandria, VA to independently perform operational vulnerability analysis supporting SOC investigations and risk prioritization. You will correlate asset data, STIG/configuration details, and DoD security controls to assess weaknesses and drive remediation.

Required are a BS in a technical field or 4 years of related experience, strong written and verbal communication, and current TS/SCI clearance with CI

Qualifications

• BS in a technical field or 4+ years of relevant experience.
• Minimum four years of experience in vulnerability/exposure analysis.
• Strong written and verbal communication skills.
• Experience with DoD RMF, security controls, and risk assessment.
• Active TS/SCI with CI polygraph.

Responsibilities

• Perform vulnerability/exposure analysis and continuous-monitoring for SOC investigations.
• Correlate ACAS/Tenable findings with asset data and configuration details to assess risk.
• Provide context to cybersecurity teams during investigations and proactive analysis.
• Coordinate findings with ISSOs/ISSMs, system owners, and remediation teams.
• Analyze recurring vulnerabilities to identify remediation priorities.
• Develop repeatable procedures and metrics for exposure analysis and monitoring.
• Maintain records of findings and remediation status in approved systems.
• Communicate technical risk in operational terms to technical and compliance stakeholders.

Skills

Vulnerability management

RMF / security controls

Technical risk assessment

Technical writing

Communication skills

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

STIG Viewer

SCAP

POA&M processes

Job description

Invictus International Consulting, LLC seeks a Cybersecurity Risk & Exposure Analyst II in Alexandria, VA to independently perform operational vulnerability analysis supporting SOC investigations and risk prioritization. You will correlate asset data, STIG/configuration details, and DoD security controls to assess weaknesses and drive remediation.

Required are a BS in a technical field or 4 years of related experience, strong written and verbal communication, and current TS/SCI clearance with CI