Senior Cyber Risk & Exposure SME IV | DoD/IC Expert

Invictus International; Alexandria (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Invictus International seeks a Lead Cybersecurity Risk & Exposure SME IV to support a DoD cyber defense mission in Alexandria, VA. Lead exposure analyses, develop risk-informed remediation, and coordinate RMF/POAM actions with ISSOs and system owners.

Must have TS/SCI with CI polygraph eligibility and hands-on DoD vulnerability management experience. Responsibilities include leading complex risk assessments, correlating vulnerability data with assets and configurations, and delivering

Qualifications

• Bachelor's degree in a technical discipline; 4 years may substitute for degree
• 8+ years of relevant experience in cyber risk and vulnerability management
• Deep knowledge of vulnerability/exposure management and risk analysis in DoD environments
• Experience with ACAS/Tenable, runZero, STIGs, SCAP, and RMF integration

Responsibilities

• Serve as senior SME for operational cyber risk and exposure analysis in a DoD cyber defense mission
• Establish methodologies to correlate vulnerability, asset, configuration, and threat data to identify exposures and priorities
• Lead complex exposure assessments and document risk-informed actions
• Provide expert context to SOC leadership and incident responders during investigations
• Lead analysis of ACAS/Tenable results and other data to identify systemic weaknesses and remediation priorities
• Coordinate with ISSOs/ISSMs, system owners, and authorization stakeholders to translate findings into RMF/POAM actions
• Develop checklists, guides, and reporting methods for exposure analysis and risk prioritization
• Mentor analysts and review remediation evidence and trends to identify systemic risk

Skills

Vulnerability management

Risk analysis

RMF

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

SCAP

STIG Viewer

Job description

Invictus International seeks a Lead Cybersecurity Risk & Exposure SME IV to support a DoD cyber defense mission in Alexandria, VA. Lead exposure analyses, develop risk-informed remediation, and coordinate RMF/POAM actions with ISSOs and system owners.

Must have TS/SCI with CI polygraph eligibility and hands-on DoD vulnerability management experience. Responsibilities include leading complex risk assessments, correlating vulnerability data with assets and configurations, and delivering