Risk/Vulnerability Analyst III - DoD

Rothe Development Inc; Colorado Springs (CO); Sur place; USD 120 000 - 170 000; Plein temps

Avantages offerts par ce poste

Equal opportunity employer

E-Verify

Résumé du poste

Rothe Development Inc. in Colorado Springs is seeking a senior cybersecurity assessment lead to guide data gathering, analysis, and reporting for threat, vulnerability, risk, and maturity assessments.

You will drive vulnerability and software assurance reviews and present findings to government stakeholders. The role requires DoD RMF experience, strong written/verbal skills, and an active Secret clearance with potential to obtain TS/SCI.

Qualifications

• Meet DoD 8570.01-M / IAT Level III requirements before starting.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, RMF-related activities.
• Strong written and verbal communication to brief senior stakeholders.
• Active Secret clearance with ability to obtain TS/SCI as required.

Responsabilités

• Lead data collection, research, technical analysis, and reporting in support of threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Analyze cybersecurity evidence, identify control gaps and technical risks, and develop actionable recommendations.
• Apply risk-management principles to assess complex cybersecurity issues and mission impacts.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
• Lead or mentor junior analysts and contribute to team planning and quality.
• Support evolving assessment methods and automation opportunities aligned with customer requirements.
• Perform other related duties in support of contract requirements.

Connaissances

Cybersecurity assessments

Risk assessments

Vulnerability assessments

Technical leadership

Communication skills

Formation

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or related field

Outils

eMASS

CI/CD

DevSecOps

RMF tools

Description du poste

Job Description

The successful candidate will lead data gathering, research, technical analysis, and assessment activities supporting cybersecurity vulnerability, software assurance, cyber risk, and cybersecurity posture baseline assessments. The role applies sound technical judgment to identify cybersecurity gaps, assess risk, develop recommended improvements, and help advance assessment processes and risk-management practices for MDA stakeholders.

Functional Responsibilities

• Lead data collection, research, technical analysis, and reporting in support of threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Analyze cybersecurity evidence, identify control gaps and technical risks, and develop practical recommendations for remediation or risk reduction.
• Apply critical thinking and risk-management principles to assess complex cybersecurity issues and mission impacts.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare clear technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
• Lead or mentor junior analysts and contribute to team planning, technical quality, and continuous improvement.
• Support evolving assessment methods, automation opportunities, and process improvements consistent with customer requirements.
• Perform other related duties in support of contract requirements.

Work Location: Schriever Space Force Base / Colorado Springs, CO

Clearance Requirement: Active Secret clearance required; ability to obtain and maintain access up to TS/SCI, as required by assigned work

Education and Experience

Minimum Education: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.

Minimum Experience: 10+ years of cybersecurity experience, including 5+ years of management, technical leadership, or team-lead experience.

Minimum Qualifications

• Must meet DoD 8570.01-M / applicable contract Information Assurance Technical (IAT) Level III requirements before starting in the position.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, software assurance assessments, or comparable RMF-related activities.
• Demonstrated ability to analyze technical and programmatic risk, perform gap analysis, and develop actionable recommendations.
• Strong written and verbal communication skills, including the ability to prepare technical reports and brief senior stakeholders.
• Active Secret clearance with the ability to obtain and maintain access up to TS/SCI, as required.

Preferred Qualifications

• Experience supporting Department of Defense, Missile Defense Agency, or comparable federal cybersecurity programs.
• Familiarity with the Risk Management Framework, NIST guidance, cybersecurity controls, assessment procedures, and POA&M development or validation.
• Experience with eMASS or similar authorization, compliance, or cybersecurity governance tools.
• Experience with software assurance, code-analysis evidence, DevSecOps, CI/CD, vulnerability-management, or security-testing activities.
• Relevant industry certifications such as Security+, CISSP, CISM, CASP+, CCSP, or comparable credentials.

Rothe is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Rothe participates in E-Verify.