Risk​/Vulnerability Analyst III - DoD

Rothe is an equal opportunity employer and will provide equal employment opportunities to employees and applicants for employment and will not discriminate against employees or applicants on the basis of race, ethnicity, religion, color, sex, pregnancy, national origin, age, military veteran status, ancestry, sexual orientation, gender identity or expression, marital status, family structure, genetic information, or mental or physical disability.

Position:Risk/Vulnerability Analyst III - DoD

Location: Colorado Springs, CO

Remote Status: On-Site

Job :693

# of Openings:1

Risk/Vulnerability Analyst III - DoD

We are seeking an experienced cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management (CCRM) program. The Risk/Vulnerability Analyst III leads cybersecurity compliance, risk-management, and independent assessment activities supporting MDA information systems and mission programs.

Job Description:

The successful candidate will lead data gathering, research, technical analysis, and assessment activities supporting cybersecurity vulnerability, software assurance, cyber risk, and cybersecurity posture baseline assessments. The role applies sound technical judgment to identify cybersecurity gaps, assess risk, develop recommended improvements, and help advance assessment processes and risk-management practices for MDA stakeholders.

Functional Responsibilities:

• Lead data collection, research, technical analysis, and reporting in support of threat, vulnerability, risk, and maturity assessments.
• Execute and support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, Cybersecurity Risk Assessments, and Cybersecurity Posture Baseline Assessments.
• Analyze cybersecurity evidence, identify control gaps and technical risks, and develop practical recommendations for remediation or risk reduction.
• Apply critical thinking and risk-management principles to assess complex cybersecurity issues and mission impacts.
• Develop and implement improvement plans for cybersecurity and risk-management processes.
• Prepare clear technical products, briefings, assessment documentation, findings, and recommendations for Government stakeholders.
• Lead or mentor junior analysts and contribute to team planning, technical quality, and continuous improvement.
• Support evolving assessment methods, automation opportunities, and process improvements consistent with customer requirements.
• Perform other related duties in support of contract requirements.

Clearance Requirement:
Active Secret clearance required; ability to obtain and maintain access up to TS/SCI, as required by assigned work

Education and Experience:

Minimum Education:

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.

Minimum Experience:

10+ years of cybersecurity experience, including 5+ years of management, technical leadership, or team-lead experience.

Minimum Qualifications:

• Must meet DoD 8570.01-M / applicable contract Information Assurance Technical (IAT) Level III requirements before starting in the position.
• Experience conducting or supporting cybersecurity assessments, risk assessments, vulnerability assessments, software assurance assessments, or comparable RMF-related activities.
• Demonstrated ability to analyze technical and programmatic risk, perform gap analysis, and develop actionable recommendations.
• Strong written and verbal communication skills, including the ability to prepare technical reports and brief senior stakeholders.
• Active Secret clearance with the ability to obtain and maintain access up to TS/SCI, as required.

Preferred Qualifications:

• Experience supporting Department of Defense, Missile Defense Agency, or comparable federal cybersecurity programs.
• Familiarity with the Risk Management Framework, NIST guidance, cybersecurity controls, assessment procedures, and POA&M development or validation.
• Experience with eMASS or similar authorization, compliance, or cybersecurity governance tools.
• Experience with software assurance, code-analysis evidence, Dev Sec Ops , CI/CD, vulnerability-management, or security-testing activities.
• Relevant industry certifications such as Security+, CISSP, CISM, CASP+, CCSP, or comparable credentials.

Rothe is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual…