Risk/Vulnerability Analyst I - DoD

Risk/Vulnerability Analyst I - DoD

We are seeking an early-career cybersecurity professional to support the Missile Defense Agency (MDA) through the TEAMS-Next Cybersecurity Compliance and Risk Management (CCRM) program. The Risk/Vulnerability Analyst I supports cybersecurity compliance, risk-management, and assessment activities for MDA information systems and mission programs.

Job Description:

The successful candidate will perform data gathering, research, analysis, and documentation in support of cybersecurity vulnerability, software assurance, and cyber risk assessments. The role works under the direction of a supervisor or senior analyst while developing assessment, analytical, and technical-reporting skills in a mission-focused MDA environment.

Functional Responsibilities:

• Collect, organize, and analyze technical and programmatic information supporting cybersecurity assessments.
• Support Cybersecurity Vulnerability Assessments, Cybersecurity Software Assurance Assessments, and Cybersecurity Risk Assessments.
• Assist with reviewing cybersecurity artifacts, assessment evidence, documentation, system information, and control implementation data.
• Identify preliminary gaps, findings, inconsistencies, and risk areas for senior analyst review.
• Assist in developing assessment products, technical reports, briefings, recommendations, and tracking documentation.
• Conduct research on cybersecurity threats, vulnerabilities, controls, requirements, and best practices.
• Support data calls, meeting preparation, status tracking, and documentation management.
• Maintain accurate records and protect sensitive Government and contractor information in accordance with applicable requirements.
• Perform other related duties in support of contract requirements.

Work Location: Schriever Space Force Base / Colorado Springs, CO

Clearance Requirement: Active Secret clearance required

Education and Experience:

Minimum Education: Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field.

Minimum Experience: 0 to 5 years of cybersecurity experience.

Minimum Qualifications:

• Must meet DoD 8570.01-M / applicable contract Information Assurance Technical (IAT) Level I requirements before starting in the position.
• Foundational understanding of cybersecurity principles, risk management, system security, vulnerability management, or compliance assessment.
• Strong analytical, organizational, written, and verbal communication skills.
• Ability to work effectively under direct supervision while managing assigned tasks and meeting deadlines.
• Active Secret clearance.

Preferred Qualifications:

• Experience or coursework involving RMF, NIST security controls, vulnerability management, security testing, system authorization, or cyber risk assessment.
• Familiarity with cybersecurity tools, security documentation, eMASS, STIGs, POA&Ms, or vulnerability scanning.
• Exposure to software assurance, secure development, code scanning, DevSecOps, or related technical disciplines.
• Security+, Network+, CySA+, CAP, or comparable cybersecurity certification.
• Experience supporting DoD, federal, or other regulated cybersecurity environments.

Rothe is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Rothe participates in E-Verify.