Cyber Security Analyst II VM (Senior) - ECCOS

Technology,-Automation,-and-Management,-Inc.

Colorado Springs (CO)

On-site

USD 110,000 - 160,000

Full time

4 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Relocation Assistance

Sign-on Bonus

Travel Required

RFI/RFP

Job summary

TeAM, Inc. seeks a Cyber Security Analyst II VM (Senior) to lead Enterprise Vulnerability Management (EVM) for Mission Delta 6. You will oversee vulnerability assessment, prioritization, remediation tracking, and risk-informed reporting to leadership and subscribers.

The role requires senior technical direction, mentoring junior analysts, and collaboration with Government stakeholders. Onsite work at Colorado Springs locations is expected, with full-time responsibilities.

Qualifications

Master’s degree is required.
10+ years of relevant experience.
Must possess DoD 8140 certification aligned to the DCWF 541 Vulnerability Assessment Analyst — Advanced.
Active Top Secret clearance with SCI eligibility.

Responsibilities

Lead vulnerability management and governance across Mission Delta 6.
Coordinate with system owners and Government stakeholders to validate findings and remediation actions.
Develop dashboards, data calls, and executive briefings communicating enterprise risk and remediation status.

Skills

Vulnerability management

Risk analysis

SLA monitoring

Leadership

Education

Master's degree

Tools

Tenable

ACAS

Nessus

RMF

Job description

Cyber Security Analyst II VM (Senior) - ECCOS

EOE Statement
Technology Automation & Management (TeAM), Inc.

TeAM is looking for highly motivated and highly skilled individuals who are ready for exciting opportunities with a growing company. For more than a quarter of a century, we've built our reputation as a premier solutions provider to the Federal Government, and eagerly seek creative problem solvers to join our TeAM.

We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.

Description

Pending Contract Award

Mission Objectives - ECCOS provides Enterprise Vulnerability Management (EVM) support to Mission Delta 6. The two Cyber Security Analyst II VM (Senior) positions lead the EVM cell's enterprise vulnerability identification, assessment, prioritization, remediation tracking, risk analysis, Service Level Agreement performance analysis, and leadership reporting activities.

The Senior EVM Analysts lead and provide technical direction to the Cyber Security Analyst I VM (Journeyman) personnel supporting scan review, vulnerability data analysis, Plans of Action and Milestones tracking, scorecard and Congressionally Mandated Report Submission data preparation, configuration-data management, and compliance-incident assessment. Together, the EVM team provides the visibility, prioritization, evidence, and risk-informed recommendations necessary for Mission Delta 6 leadership and subscribers to reduce enterprise cyber risk.

Position Responsibility Summary (by CLIN focus):

CLIN 0005 - EVM Lead

Serve as the Enterprise Vulnerability Management Lead and senior technical focal point for vulnerability assessment, prioritization, tracking, and mitigation coordination across Mission Delta 6 and its subscribers.
Lead the identification, categorization, validation, prioritization, and mitigation tracking of vulnerabilities, security weaknesses, misconfigurations, compliance gaps, and related cybersecurity risks in accordance with PWS 3.3.
Administer and analyze vulnerability information within the Government-provided Tenable repository, including review of data quality, scan coverage, asset information, scan results, vulnerability status, exception status, and remediation progress.
Establish and maintain enterprise and subscriber-level prioritization lists using vulnerability severity, mission impact, exploitability, asset criticality, operational dependency, remediation status, aging, and other Government-directed risk factors.
Coordinate with system owners, administrators, cybersecurity personnel, mission partners, and Government stakeholders to validate findings, clarify ownership, identify remediation dependencies, and track corrective actions through closure.
Facilitate development, validation, quality review, and submission of Department of War Scorecard and Congressionally Mandated Report Submission data, ensuring that reported data is timely, accurate, traceable, and reconciled with authoritative Government sources.
Develop and maintain vulnerability-management dashboards, trackers, data calls, reports, and executive briefings that communicate enterprise risk, remediation status, aging vulnerabilities, compliance trends, and decisions required.
Lead technical reviews of vulnerability findings and provide risk-informed recommendations for remediation sequencing, compensating controls, escalation, risk acceptance, and mitigation planning.
Provide technical direction, work prioritization, mentoring, and quality oversight for junior EVM analysts supporting scan review, data analysis, POA&M tracking, configuration-data management, compliance analysis, and reporting.
Serve as the trained alternate for CLIN 0006, assuming responsibility for SLA performance monitoring, enterprise trend and risk analysis, and assessment/audit-finding tracking when required.
Alternate: CLIN 0006

CLIN 0006 - SLA Performance, Trend and Risk Analysis

Serve as the Enterprise Vulnerability Management Lead and senior technical focal point for vulnerability assessment, prioritization, tracking, and mitigation coordination across Mission Delta 6 and its subscribers.
Lead the identification, categorization, validation, prioritization, and mitigation tracking of vulnerabilities, security weaknesses, misconfigurations, compliance gaps, and related cybersecurity risks in accordance with PWS 3.3.
Administer and analyze vulnerability information within the Government-provided Tenable repository, including review of data quality, scan coverage, asset information, scan results, vulnerability status, exception status, and remediation progress.
Establish and maintain enterprise and subscriber-level prioritization lists using vulnerability severity, mission impact, exploitability, asset criticality, operational dependency, remediation status, aging, and other Government-directed risk factors.
Coordinate with system owners, administrators, cybersecurity personnel, mission partners, and Government stakeholders to validate findings, clarify ownership, identify remediation dependencies, and track corrective actions through closure.
Facilitate development, validation, quality review, and submission of Department of War Scorecard and Congressionally Mandated Report Submission data, ensuring that reported data is timely, accurate, traceable, and reconciled with authoritative Government sources.
Develop and maintain vulnerability-management dashboards, trackers, data calls, reports, and executive briefings that communicate enterprise risk, remediation status, aging vulnerabilities, compliance trends, and decisions required.
Lead technical reviews of vulnerability findings and provide risk-informed recommendations for remediation sequencing, compensating controls, escalation, risk acceptance, and mitigation planning.
Provide technical direction, work prioritization, mentoring, and quality oversight for junior EVM analysts supporting scan review, data analysis, POA&M tracking, configuration-data management, compliance analysis, and reporting.
Serve as the trained alternate for CLIN 0006, assuming responsibility for SLA performance monitoring, enterprise trend and risk analysis, and assessment/audit-finding tracking when required.
Alternate: CLIN 0005

Position Requirements

Minimum Required Qualification: [These qualifications are mandatory for consideration]

Experience

Serve as the Enterprise Vulnerability Management Lead and senior technical focal point for vulnerability assessment, prioritization, tracking, and mitigation coordination across Mission Delta 6 and its subscribers.
Lead the identification, categorization, validation, prioritization, and mitigation tracking of vulnerabilities, security weaknesses, misconfigurations, compliance gaps, and related cybersecurity risks in accordance with PWS 3.3.
Administer and analyze vulnerability information within the Government-provided Tenable repository, including review of data quality, scan coverage, asset information, scan results, vulnerability status, exception status, and remediation progress.
Establish and maintain enterprise and subscriber-level prioritization lists using vulnerability severity, mission impact, exploitability, asset criticality, operational dependency, remediation status, aging, and other Government-directed risk factors.
Coordinate with system owners, administrators, cybersecurity personnel, mission partners, and Government stakeholders to validate findings, clarify ownership, identify remediation dependencies, and track corrective actions through closure.
Facilitate development, validation, quality review, and submission of Department of War Scorecard and Congressionally Mandated Report Submission data, ensuring that reported data is timely, accurate, traceable, and reconciled with authoritative Government sources.
Develop and maintain vulnerability-management dashboards, trackers, data calls, reports, and executive briefings that communicate enterprise risk, remediation status, aging vulnerabilities, compliance trends, and decisions required.
Lead technical reviews of vulnerability findings and provide risk-informed recommendations for remediation sequencing, compensating controls, escalation, risk acceptance, and mitigation planning.
Provide technical direction, work prioritization, mentoring, and quality oversight for junior EVM analysts supporting scan review, data analysis, POA&M tracking, configuration-data management, compliance analysis, and reporting.
Serve as the trained alternate for CLIN 0006, assuming responsibility for SLA performance monitoring, enterprise trend and risk analysis, and assessment/audit-finding tracking when required.

Education and Credentials

Education: Master’s degree required.
Certifications: Must possess and maintain at least one current qualifying DoD 8140 certification aligned to the DCWF 541 Vulnerability Assessment Analyst — Advanced work role. Acceptable certifications include:
- Certified in Forensic Research — CFR
- Certified Information Systems Auditor — CISA
- Certified Information Security Manager — CISM
- CompTIA Cybersecurity Analyst — CySA+
- GIAC Penetration Tester — GPEN
- GIAC Systems and Network Auditor — GSNA
Years of Experience: Ten (10) or more years of relevant experience.
CLINs 0005 and 0006 are mapped to DCWF Work Role 541, Vulnerability Assessment Analyst, at the Advanced proficiency level, with 10+ years of experience, a master’s degree, and one qualifying certification required. 9
Certification Maintenance: The employee must maintain required certification(s) in good standing and complete at least 20 hours of continuous professional development annually, or the higher amount necessary to maintain the applicable certification. 10
Security and Government Training: Prior to receiving network access, selected personnel must complete required COMPUSEC, OPSEC, Anti-Terrorism Level I, Government information-assurance, security, and role-specific training.

Optional/Value-added qualifications

[These qualifications are desirable but not required]

Optional/Value-added Experience:

Experience supporting the U.S. Space Force, U.S. Air Force, Department of Defense, Combatant Commands, CSSPs, or other classified cybersecurity mission environments.
Experience administering, operating, analyzing, reporting from, or otherwise supporting Tenable, ACAS, Nessus, SecurityCenter, or comparable enterprise vulnerability-management tools.
Experience with Department of War Scorecard processes, Congressionally Mandated Report Submissions, DoD vulnerability management, cybersecurity compliance reporting, or enterprise cyber-readiness reporting.
Experience developing enterprise vulnerability-management strategies, remediation prioritization models, risk-scoring methodologies, vulnerability-aging analysis, or executive cyber-risk dashboards.
Experience supporting Red Team assessments, adversarial assessments, cyber threat emulation, readiness inspections, cybersecurity audits, compliance inspections, or corrective-action programs.
Experience with RMF, NIST SP 800-53 security controls, DISA Security Technical Implementation Guides, POA&Ms, authorization packages, continuous monitoring, and security-control assessment activities.
Experience managing SLA performance, operational-level agreements, cybersecurity service metrics, performance thresholds, or remediation-service commitments.
Experience leading technical teams, mentoring junior cyber analysts, overseeing analytical quality, and coordinating multi-stakeholder risk-reduction initiatives.

Optional/Value-added Additional Credentials:

Education: Master’s degree in cybersecurity, computer science, information systems, information technology, software engineering, data science, or another closely related technical discipline.
Certifications/Training: Additional relevant certifications such as CISSP, CCSP, SecurityX/CASP+, CEH, GSEC, GCIA, GCIH, GCED, CGRC/CAP, or relevant Tenable, ACAS, RMF, vulnerability-assessment, audit, or cybersecurity leadership training.
Experience: More than ten years of progressively responsible experience leading DoD, Space Force, Air Force, CSSP, enterprise vulnerability-management, cyber-defense, compliance, risk-management, or classified mission-support activities.

Duty Location:

Work locations are Schriever Space Force Base, Peterson Space Force Base and Colorado Springs Local Area. Support provided to Geographically Separated Unites (GSUs).

Work Arrangement:

Onsite

Travel Requirements:

None anticipated

Minimum Security Clearance Required:

Active Top Secret clearance with Sensitive Compartmented Information eligibility at time of offer and start of performance.

Full-Time/Part-Time Full-Time