DoD Azure Security & Vulnerability Analyst

Torch Technologies, Inc.; Huntsville (AL); Hybrid; USD 100,000 - 128,000; Full time

Benefits offered by this job

ESOP participation

401(k) match

Medical

Dental

Vision

Life insurance

Short-term disability

Long-term disability

FSAs/HSAs

EAP

Education assistance

Paid time off

Holidays

Job summary

Torch Technologies, Inc. in Huntsville, AL, seeks a Vulnerability Management & Security Analyst to perform scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. You will ensure Azure workloads stay hardened and compliant with DoD standards.

Responsibilities include vulnerability assessments with ACAS/Nessus, STIG verification, remediation guidance, POA&M maintenance in eMASS, and security monitoring with Defender for Cloud.

Qualifications

• Bachelor’s degree in IT, cybersecurity, or related field; 2+ years DoD cybersecurity analysis and vulnerability scanning.
• 2+ years using ACAS/Nessus for network and host scanning.
• Experience applying DISA STIGs across Linux and Windows systems.
• Current DoD 8570/8140 IAT Level II certification (e.g., Security+, CySA+, or GSEC).
• Strong problem-solving and collaboration abilities.

Responsibilities

• Conduct scheduled and ad-hoc vulnerability assessments across Azure Government VMs and network components using ACAS/Nessus.
• Evaluate and document system compliance against DISA STIGs/SRGs using SCAP tools and STIG Viewer.
• Provide remediation guidance and assist in remediation tracking for identified vulnerabilities.
• Populate and maintain POA&M records in eMASS for accurate risk reporting.
• Monitor cloud security hygiene using Defender for Cloud and DISA dashboards.

Skills

Vulnerability assessment

ACAS/Nessus

DISA STIGs

DoD security clearance

IAT II cert

Education

Bachelor’s degree in IT/cybersecurity

Tools

ACAS

Nessus

PowerShell

eMASS

Defender for Cloud

Job description

Torch Technologies, Inc. in Huntsville, AL, seeks a Vulnerability Management & Security Analyst to perform scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. You will ensure Azure workloads stay hardened and compliant with DoD standards.

Responsibilities include vulnerability assessments with ACAS/Nessus, STIG verification, remediation guidance, POA&M maintenance in eMASS, and security monitoring with Defender for Cloud.