Senior Cyber Risk & Exposure SME IV

Invictus International Consulting, LLC; Alexandria (VA); On-site; USD 153,000 - 207,000; Full time

Job summary

Invictus International Consulting, LLC in Alexandria, VA seeks a Lead Cybersecurity Risk & Exposure Subject Matter Expert IV to serve as the senior SME for operational cyber risk, exposure analysis, and continuous monitoring supporting a DoD cyber defense mission.

You will establish methodologies, lead complex risk assessments, coordinate with SOC and ISSOs/ISSMs, and translate findings into RMF actions and remediation plans. A TS/SCI with CI polygraph is required.

Qualifications

• Bachelor's degree in a technical discipline or equivalent work experience.
• 8+ years of relevant DoD/IC cyber risk, vulnerability, or RMF experience.
• Expert knowledge of vulnerability/exposure management, threat-informed risk analysis, RMF and security controls.
• Experience with ACAS/Tenable, runZero, DoD STIGs, SCAP, POA&M, and SOC/IR findings integration.

Responsibilities

• Serve as senior SME for operational cyber risk, vulnerability/exposure analysis, and continuous monitoring supporting a DoD cyber defense mission.
• Establish methodologies to correlate vulnerability, asset, configuration, and threat data to identify exposures and prioritize risk.
• Lead complex exposure and impact assessments, developing exploitation scenarios and risk-informed actions.

Skills

Vulnerability management

Risk analysis

DoD RMF

Continuous monitoring

SCAP/STIG

ACAS/Tenable

SOC coordination

Threat-informed decision making

Education

Bachelor's degree in a technical field

Additional 4 years substituted for degree

Tools

ACAS

Tenable

runZero

SCAP

STIG/SCAP Viewer

Job description

Invictus International Consulting, LLC in Alexandria, VA seeks a Lead Cybersecurity Risk & Exposure Subject Matter Expert IV to serve as the senior SME for operational cyber risk, exposure analysis, and continuous monitoring supporting a DoD cyber defense mission.

You will establish methodologies, lead complex risk assessments, coordinate with SOC and ISSOs/ISSMs, and translate findings into RMF actions and remediation plans. A TS/SCI with CI polygraph is required.