Risk/Vulnerability Analyst II - DoD

Risk/Vulnerability Analyst II

Rothe is seeking a Risk/Vulnerability Analyst II to support the Missile Defense Agency’s Cybersecurity Compliance and Risk Management program at Schriever Space Force Base in Colorado Springs, Colorado.

Job Description:

The selected candidate will conduct cybersecurity assessment and risk-management activities in support of Department of War information systems, software, connections, and mission environments.

Functional Responsibilities:

• Perform data gathering, research, and analysis in support of threat, vulnerability, risk, and maturity assessments.
• Conduct or support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Apply critical thinking and gap analysis to identify cybersecurity risks, control deficiencies, and opportunities for improvement.
• Assist with developing risk-management implementation plans, assessment artifacts, findings, recommendations, and supporting documentation.
• Support cybersecurity assessment preparation, execution, analysis, peer review, quality assurance, and post-assessment activities.
• Coordinate with technical leads, assessors, Information System Security Managers, system owners, and other Government and contractor stakeholders.
• Maintain accurate task, time-charging, and documentation records in accordance with program procedures.
• Contribute to continuous improvement of cybersecurity assessment, risk-management, and mission-support processes.
• Perform other related duties in support of CCRM mission requirements.

Location: Colorado Springs, Colorado, Schriever Space Force Base / Missile Defense Integration and Operations Center

Work Arrangement: Primarily onsite at the Government location. Limited telework may be authorized based on mission requirements and Government direction.

Installation Access: Must be able to obtain and maintain installation access, site badge, and applicable Government system credentials.

Travel: Up to 25 percent, based on mission requirements.

Education and Experience:

Minimum Education: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field.

Minimum Experience: Five or more years of cybersecurity experience.

Minimum Qualifications:

• Extensive training experience and ability.
• Current DoD IAT Level II certification prior to start date; no exceptions.
• Active Top Secret security clearance; ability to obtain and maintain SCI access as required by the assigned position.
• Demonstrated experience conducting cybersecurity research, analysis, vulnerability assessment, risk assessment, and gap analysis.
• Strong written and verbal communication skills.
• Proficiency with Microsoft Outlook, Word, Excel, and PowerPoint.
• Ability to work under general supervision while exercising sound judgment, flexibility, and initiative.

Preferred Qualifications:

• Experience supporting RMF assessment, authorization, continuous monitoring, eMASS, CVA, CSAA, CRA, CPBA, or comparable cybersecurity assessment activities.
• Experience supporting Department of War, DoD, or Federal cybersecurity programs.
• Experience with control validation, vulnerability management, POA&M analysis, security assessment reporting, or risk-based decision support.
• Current SCI eligibility.

Rothe is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Rothe participates in E-Verify.