Cyber Risk Analyst SME

Job Description

• Serve as an SME conducting complex on-site and remote cyber risk assessments for enterprise systems, applications, and mission-critical infrastructure.
• Apply NIST SP 800-30, NIST RMF, threat modeling, and MITRE ATT&CK to evaluate vulnerabilities, threats, and cyber mission risks.
• Develop risk characterization reports, mitigation strategies, recommendations, task plans, assessment schedules, and decision-support artifacts for technical and executive audiences.
• Collaborate with cybersecurity, systems engineering, OT, supply chain, mission assurance, government, contractor, and intelligence stakeholders; regular travel to client sites is required.
• Requires 10+ years of cybersecurity risk assessment, vulnerability analysis, or cyber mission assurance experience and an active DOE Q or higher clearance, or ability to obtain one; hybrid work in the D.C. region.