Senior DoD Cyber Risk & Exposure Analyst (TS/SCI)

Invictus International; Alexandria (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Invictus International seeks a Senior Cybersecurity Risk & Exposure Analyst III to lead complex operational risk analyses across DoD systems, supporting SOC investigations and remediation activities, prioritizing exposures and coordinating with system owners to translate findings into actionable mitigations.

Requires TS/SCI with CI poly, DoD 8570 IAT II/IAM II, and hands-on in vulnerability management, RMF controls, asset discovery tools, and threat-informed risk analysis within a defense

Qualifications

• Bachelor's degree in a technical discipline; four additional years may substitute for the degree.
• Minimum six years of relevant experience beyond education.
• Current DoD 8570 IAT II or IAM II certification.
• Experience in a DoD or IC environment preferred.
• Active TS/SCI clearance with CI polygraph eligibility.

Responsibilities

• Lead complex operational cyber risk and exposure analysis across DoD systems.
• Correlate vulnerability data, asset discovery, and SOC findings to identify high-risk exposures.
• Mentor junior personnel and review analytic work for accuracy and risk context.
• Coordinate with ISSOs/ISSMs, system owners, and remediation teams for mitigations.
• Develop exposure-analysis procedures, risk-prioritization methods, and guides.

Skills

Vulnerability management

Exposure risk analysis

DoD continuous monitoring

RMF controls

Network security

Technical risk assessment

Education

Bachelor's degree in a technical discipline

Tools

ACAS/Tenable

runZero

Stig Viewer

SCAP

POA&M

Job description

Invictus International seeks a Senior Cybersecurity Risk & Exposure Analyst III to lead complex operational risk analyses across DoD systems, supporting SOC investigations and remediation activities, prioritizing exposures and coordinating with system owners to translate findings into actionable mitigations.

Requires TS/SCI with CI poly, DoD 8570 IAT II/IAM II, and hands-on in vulnerability management, RMF controls, asset discovery tools, and threat-informed risk analysis within a defense