Risk/Vulnerability Analyst II

Rothe • Colorado Springs, CO

4d • Onsite

About The Position

Rothe is seeking a Risk/Vulnerability Analyst II to support the Missile Defense Agency’s Cybersecurity Compliance and Risk Management program at Schriever Space Force Base in Colorado Springs, Colorado. The selected candidate will conduct cybersecurity assessment and risk-management activities in support of Department of War information systems, software, connections, and mission environments.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field.
• Five or more years of cybersecurity experience.
• Extensive training experience and ability.
• Current DoD IAT Level II certification prior to start date; no exceptions.
• Active Top Secret security clearance; ability to obtain and maintain SCI access as required by the assigned position.
• Demonstrated experience conducting cybersecurity research, analysis, vulnerability assessment, risk assessment, and gap analysis.
• Strong written and verbal communication skills.
• Proficiency with Microsoft Outlook, Word, Excel, and PowerPoint.
• Ability to work under general supervision while exercising sound judgment, flexibility, and initiative.

Nice To Haves

• Experience supporting RMF assessment, authorization, continuous monitoring, eMASS, CVA, CSAA, CRA, CPBA, or comparable cybersecurity assessment activities.
• Experience supporting Department of War, DoD, or Federal cybersecurity programs.
• Experience with control validation, vulnerability management, POA&M analysis, security assessment reporting, or risk-based decision support.
• Current SCI eligibility.

Responsibilities

• Perform data gathering, research, and analysis in support of threat, vulnerability, risk, and maturity assessments.
• Conduct or support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Apply critical thinking and gap analysis to identify cybersecurity risks, control deficiencies, and opportunities for improvement.
• Assist with developing risk-management implementation plans, assessment artifacts, findings, recommendations, and supporting documentation.
• Support cybersecurity assessment preparation, execution, analysis, peer review, quality assurance, and post-assessment activities.
• Coordinate with technical leads, assessors, Information System Security Managers, system owners, and other Government and contractor stakeholders.
• Maintain accurate task, time-charging, and documentation records in accordance with program procedures.
• Contribute to continuous improvement of cybersecurity assessment, risk-management, and mission-support processes.
• Perform other related duties in support of CCRM mission requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level