Senior DoD Cyber Risk & Exposure Analyst (TS/SCI)

Invictus International Consulting, LLC; Colorado Springs (CO); On-site; USD 149,000 - 182,000; Full time

Job summary

Invictus International Consulting, LLC is seeking a Senior Cybersecurity Risk & Exposure Analyst III in Colorado Springs to lead complex risk analysis for DoD systems. You will correlate vulnerability data, asset discovery, and SOC findings to identify exposures with the greatest operational risk.

A TS/SCI clearance with CI poly is required. The role supports RMF activities, coordinates with ISSOs/ISSMs, and mentors junior analysts while developing robust exposure-analysis procedures and

Qualifications

• Bachelor's degree in a technical discipline with 4 years of experience allowed as substitution.
• Minimum six years of relevant experience beyond education.
• Knowledge of vulnerability and exposure management, threat-informed risk analysis, RMF and security controls, network/system security, and technical risk assessment.
• Experience with ACAS/Tenable, runZero or similar tools, DoD STIG/SCAP, and POA&M processes; coordination with SOC/IR and ISSO/ISSM functions.
• Proven ability to lead complex exposure or vulnerability analyses and translate findings into RMF actions.
• Current DoD 8570 IAT II or IAM II certification required.
• Experience in a DoD or IC environment is preferred.
• Active TS/SCI clearance with ability to obtain/maintain CI polygraph.

Responsibilities

• Lead complex operational cyber risk and exposure analysis supporting SOC investigations and vulnerability prioritization across DoD systems.
• Correlate vulnerability data, asset discovery, system criticality, and SOC findings to identify high-risk exposures.
• Analyze vulnerabilities in context, including exploitation paths, attacker TTPs, and mission impact.
• Serve as senior technical resource to Cybersecurity Operations and Threat Analysts during investigations and hunting.
• Coordinate with ISSOs/ISSMs, system owners, engineers, and remediation teams to translate findings into actionable mitigation and RMF follow-up.
• Develop and maintain exposure-analysis procedures, risk-prioritization methods, and technical checklists to improve decision quality.
• Review remediation evidence and metrics to identify systemic risk and drive closure or escalation.
• Support RMF and assessment activities affecting security-control effectiveness and authorization posture.

Skills

Vulnerability management

Risk analysis

RMF & security controls

DoD/IC experience

Exposure/asset discovery

Threat-informed analysis

Incident response coordination

Mentoring

Education

Bachelor's degree

Tools

ACAS/Tenable

runZero

STIG Viewer/SCAP

POA&M processes

Job description

Invictus International Consulting, LLC is seeking a Senior Cybersecurity Risk & Exposure Analyst III in Colorado Springs to lead complex risk analysis for DoD systems. You will correlate vulnerability data, asset discovery, and SOC findings to identify exposures with the greatest operational risk.

A TS/SCI clearance with CI poly is required. The role supports RMF activities, coordinates with ISSOs/ISSMs, and mentors junior analysts while developing robust exposure-analysis procedures and