Azure Government Vulnerability & Security Analyst

Command Post Technologies, Inc.; Suffolk (VA); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health benefits

Leadership training

401k with company matching

ESOP

Tuition reimbursement

Flexible hours

Work/Life balance

Paid Time Off

Parental Leave

Job summary

Command Post Technologies, Inc. in Suffolk, VA seeks a Vulnerability Management & Security Analyst to perform day-to-day scanning, STIG assessment, and remediation tracking for DoD cloud migration systems.

You will use ACAS/Nessus to assess Azure Government workloads, document compliance, and generate POA&M records in eMASS, while coordinating with engineers to remediate findings and maintain Defender for Cloud monitoring.

Qualifications

• U.S. citizenship required
• Active Secret clearance required
• Relevant degree plus hands-on DoD cyber experience or equivalent
• Experience with ACAS/Nessus for network, host, and credentialed scans
• Experience applying DISA STIGs to Linux and Windows
• IAT Level II certification (e.g., Security+, CySA+, GSEC)
• Strong problem-solving abilities
• Effective communication and collaboration skills

Responsibilities

• Conduct vulnerability assessments across Azure Government VMs and network components using ACAS/Nessus.
• Assess compliance against DISA STIGs/SRGs with SCAP tools and STIG Viewer.
• Provide remediation guidance to cloud and systems engineers for identified vulnerabilities.
• Maintain POA&M records in eMASS for accurate risk reporting to officials.
• Monitor cloud security with Microsoft Defender for Cloud and DISA dashboards.

Skills

ACAS/Nessus usage

Vulnerability assessments

STIG/SRG assessment

POA&M management

Cloud security

eMASS documentation

Communication skills

Collaboration

Problem solving

Defender for Cloud basics

Education

Bachelor’s degree in IT/Cybersecurity or related field

Associate’s degree in IT/Cybersecurity

High school diploma with 8 years DoD cyber experience

Tools

ACAS (Tenable Nessus)

STIG Viewer

SCAP tools

PowerShell scripting

Bash scripting

eMASS

Microsoft Defender for Cloud

Job description

Command Post Technologies, Inc. in Suffolk, VA seeks a Vulnerability Management & Security Analyst to perform day-to-day scanning, STIG assessment, and remediation tracking for DoD cloud migration systems.

You will use ACAS/Nessus to assess Azure Government workloads, document compliance, and generate POA&M records in eMASS, while coordinating with engineers to remediate findings and maintain Defender for Cloud monitoring.