Azure Cloud Vulnerability & Patch Security Analyst

Applied Research Solutions; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Applied Research Solutions seeks a Cloud Vulnerability & Patch Analyst to monitor and harden a DevSecOps cloud environment aligned with DoD RMF and CMMC 2.0 controls. You will utilize ACAS, Nessus, Defender for Cloud, and Sentinel to scan, log, hunt threats, and report compliance.

You will work with cloud engineers and ISSO/ISSM to remediate findings, develop secure baselines, and drive proactive security strategies across Azure workloads and containers.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS or related field.
• Hands-on experience with vulnerability scanning tools (ACAS, Nessus, Defender for Cloud).
• Familiarity with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 security controls.

Responsibilities

• Conduct recurring vulnerability scans across Azure cloud environments using ACAS, Nessus, Defender for Cloud.
• Analyze and correlate alerts in Microsoft Sentinel to detect threats and compliance deviations.
• Develop hardened baselines and secure configurations for Azure services, VMs and containers.
• Implement CI/CD security controls to catch misconfigurations early in pipelines.
• Collaborate with engineers and ISSO/ISSM to validate remediation actions.
• Prepare vulnerability reports, POA&Ms and compliance artifacts for audits.

Skills

Vulnerability assessment

SIEM analysis

DevSecOps

Azure security

Education

Bachelor’s degree

Tools

ACAS

Tenable Nessus

Microsoft Defender for Cloud

Microsoft Sentinel

Job description

Applied Research Solutions seeks a Cloud Vulnerability & Patch Analyst to monitor and harden a DevSecOps cloud environment aligned with DoD RMF and CMMC 2.0 controls. You will utilize ACAS, Nessus, Defender for Cloud, and Sentinel to scan, log, hunt threats, and report compliance.

You will work with cloud engineers and ISSO/ISSM to remediate findings, develop secure baselines, and drive proactive security strategies across Azure workloads and containers.