Risk/Vulnerability Analyst III - DoD

Rothe Development Inc.; Colorado Springs (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

Rothe Development Inc. seeks an experienced cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management program.

The Risk/Vulnerability Analyst III leads cybersecurity compliance, risk-management, and independent assessment activities supporting MDA information systems and mission programs. The role requires applying risk-management principles to identify gaps, develop improvements, and lead data gathering, analysis,

Qualifications

• Must meet DoD 8570.01-M / IAT Level III requirements before starting.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, software assurance assessments, or RMF-related activities.
• Ability to analyze technical and programmatic risk, perform gap analysis, and provide actionable recommendations.
• Strong written and verbal communication skills for technical reports and briefings.
• Active Secret clearance with ability to obtain TS/SCI access if required.

Responsibilities

• Lead data collection, research, technical analysis, and reporting for threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability, Software Assurance, Risk, and Posture Baseline Assessments.
• Identify control gaps and technical risks; develop practical remediation recommendations.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare technical products, briefings, and recommendations for Government stakeholders.
• Mentor junior analysts and contribute to team planning and quality.

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field

Tools

eMASS

RMF tooling

CI/CD pipelines

Job description

Rothe's EEO Statement:

Rothe is an equal opportunity employer and will provide equal employment opportunities to employees and applicants for employment and will not discriminate against employees or applicants on the basis of race, ethnicity, religion, color, sex, pregnancy, national origin, age, military veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability.

Position:Risk/Vulnerability Analyst III - DoD

Location: Colorado Springs, CO

Remote Status: On-Site

Job Id:693

# of Openings:1

Risk/Vulnerability Analyst III - DoD

We are seeking an experienced cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management (CCRM) program. The Risk/Vulnerability Analyst III leads cybersecurity compliance, risk-management, and independent assessment activities supporting MDA information systems and mission programs.

Job Description:

The successful candidate will lead data gathering, research, technical analysis, and assessment activities supporting cybersecurity vulnerability, software assurance, cyber risk, and cybersecurity posture baseline assessments. The role applies sound technical judgment to identify cybersecurity gaps, assess risk, develop recommended improvements, and help advance assessment processes and risk-management practices for MDA stakeholders.

Functional Responsibilities:

• Lead data collection, research, technical analysis, and reporting in support of threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Analyze cybersecurity evidence, identify control gaps and technical risks, and develop practical recommendations for remediation or risk reduction.
• Apply critical thinking and risk-management principles to assess complex cybersecurity issues and mission impacts.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare clear technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
• Lead or mentor junior analysts and contribute to team planning, technical quality, and continuous improvement.
• Support evolving assessment methods, automation opportunities, and process improvements consistent with customer requirements.
• Perform other related duties in support of contract requirements.

Clearance Requirement: Active Secret clearance required; ability to obtain and maintain access up to TS/SCI, as required by assigned work

Education and Experience:

Minimum Education: Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.

Minimum Experience: 10+ years of cybersecurity experience, including 5+ years of management, technical leadership, or team-lead experience.

Minimum Qualifications:

• Must meet DoD 8570.01-M / applicable contract Information Assurance Technical (IAT) Level III requirements before starting in the position.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, software assurance assessments, or comparable RMF-related activities.
• Demonstrated ability to analyze technical and programmatic risk, perform gap analysis, and develop actionable recommendations.
• Strong written and verbal communication skills, including the ability to prepare technical reports and brief senior stakeholders.
• Active Secret clearance with the ability to obtain and maintain access up to TS/SCI, as required.

Preferred Qualifications:

• Experience supporting Department of Defense, Missile Defense Agency, or comparable federal cybersecurity programs.
• Familiarity with the Risk Management Framework, NIST guidance, cybersecurity controls, assessment procedures, and POA&M development or validation.
• Experience with eMASS or similar authorization, compliance, or cybersecurity governance tools.
• Experience with software assurance, code-analysis evidence, DevSecOps, CI/CD, vulnerability-management, or security-testing activities.
• Relevant industry certifications such as Security+, CISSP, CISM, CASP+, CCSP, or comparable credentials.

Rothe is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Rothe offices throughout the US and remote locations near NASA and MDA centers.