Risk/Vulnerability Analyst III - DoD

Rothe • Colorado Springs, CO

7d • Onsite

About The Position

Rothe is seeking an experienced cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management (CCRM) program. The Risk/Vulnerability Analyst III leads cybersecurity compliance, risk-management, and independent assessment activities supporting MDA information systems and mission programs.

The successful candidate leads data gathering, research, technical analysis, and assessment activities related to cybersecurity vulnerability, software assurance, cyber risk, and cybersecurity posture baseline assessments. The role applies technical judgment to identify cybersecurity gaps, assess risk, recommend improvements, and advance assessment processes and risk-management practices for MDA stakeholders.

The position is based at Schriever Space Force Base in Colorado Springs, Colorado. An active Secret clearance is required, along with the ability to obtain and maintain access up to TS/SCI as required by assigned work. Candidates must meet DoD 8570.01-M or applicable contract IAT Level III requirements before starting.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.
• At least 10 years of cybersecurity experience, including at least 5 years of management, technical leadership, or team-lead experience.
• Must meet DoD 8570.01-M or applicable contract Information Assurance Technical (IAT) Level III requirements before starting.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, software assurance assessments, or comparable RMF-related activities.
• Demonstrated ability to analyze technical and programmatic risk, perform gap analysis, and develop actionable recommendations.
• Strong written and verbal communication skills, including the ability to prepare technical reports and brief senior stakeholders.
• Active Secret clearance and ability to obtain and maintain access up to TS/SCI, as required.

Nice To Haves

• Experience supporting Department of Defense, Missile Defense Agency, or comparable federal cybersecurity programs.
• Familiarity with the Risk Management Framework, NIST guidance, cybersecurity controls, assessment procedures, and POA&M development or validation.
• Experience with eMASS or similar authorization, compliance, or cybersecurity governance tools.
• Experience with software assurance, code-analysis evidence, DevSecOps, CI/CD, vulnerability management, or security-testing activities.
• Relevant industry certifications such as Security+, CISSP, CISM, CASP+, CCSP, or comparable credentials.

Responsibilities

• Lead data collection, research, technical analysis, and reporting for threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Analyze cybersecurity evidence, identify control gaps and technical risks, and develop practical remediation or risk-reduction recommendations.
• Apply critical thinking and risk-management principles to assess complex cybersecurity issues and mission impacts.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
• Lead or mentor junior analysts and contribute to team planning, technical quality, and continuous improvement.
• Support evolving assessment methods, automation opportunities, and process improvements consistent with customer requirements.
• Perform other related duties in support of contract requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior