Senior Cyber Risk & Exposure Analyst

invictusic; Alexandria (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

invictusic in Alexandria, VA seeks a Senior Cybersecurity Risk & Exposure Analyst III to lead complex operational cyber risk and exposure analysis for DoD systems. You will support SOC investigations, vulnerability prioritization, and remediation across multiple sites.

You will correlate vulnerability data with asset discovery, system criticality, and threat activity to identify exposures that pose the greatest operational risk.

Qualifications

• Experience with vulnerability/exposure management in DoD environments.
• Knowledge of RMF, security controls, and continuous monitoring.
• Ability to translate findings into mitigation actions and RMF artifacts.
• Current DoD 8570 IAT II or IAM II certification is required.

Responsibilities

• Lead complex operational cyber risk and exposure analysis supporting SOC investigations, threat-informed prioritization, continuous monitoring, and remediation across DoD systems and sites.
• Correlate vulnerability data, asset discovery, system criticality, network reachability, security configuration, and SOC findings to identify exposures with the greatest operational or mission risk.
• Analyze vulnerabilities and configuration weaknesses in context, including exploitation paths, adversary TTPs, affected technologies, compensating controls, and mission impact.
• Mentor Level I and II personnel and review analytic work for technical accuracy and risk context.
• Coordinate with ISSOs/ISSMs, system owners, engineers, and remediation teams to translate SOC findings into actionable mitigation and RMF actions.

Skills

Vulnerability management

Threat-informed risk analysis

RMF/security controls

SOC investigations

DoD exposure analysis

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

STIG Viewer

SCAP

Job description

invictusic in Alexandria, VA seeks a Senior Cybersecurity Risk & Exposure Analyst III to lead complex operational cyber risk and exposure analysis for DoD systems. You will support SOC investigations, vulnerability prioritization, and remediation across multiple sites.

You will correlate vulnerability data with asset discovery, system criticality, and threat activity to identify exposures that pose the greatest operational risk.