DoD Cloud Vulnerability & STIG Analyst

Command Post Technologies, Inc; Suffolk (VA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health benefits

401k with company match

Employee ESOP

Tuition reimbursement

Flexible hours

Paid Time Off

Parental Leave

Job summary

Command Post Technologies, Inc. seeks a Vulnerability Management & Security Analyst to perform day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. You will ensure Azure workloads remain hardened and compliant with DoD standards.

The role reports to the Primary Government Project Lead and Lead Cybersecurity Specialist, delivering remediation guidance and maintaining POA&Ms in eMASS while monitoring cloud security using Defender for Cloud.

Qualifications

• Experience performing vulnerability assessments in Azure Government or similar environments.
• Ability to document system compliance against STIGs/SRGs using SCAP tools.
• Strong communication and remediation guidance skills.

Responsibilities

• Conduct scheduled and ad hoc vulnerability assessments across Azure Government VMs and network components using ACAS/Nessus.
• Evaluate compliance against DISA STIGs/SRGs and document findings.
• Collaborate with engineers to provide remediation guidance and track IAVAs.
• Maintain POA&M records in eMASS for risk reporting.
• Monitor cloud security hygiene with Defender for Cloud and DM dashboards.

Skills

Vulnerability assessments

ACAS / Nessus

DISA STIGs

IAT II (Security+ / CySA+ / GSEC)

POA&M / eMASS

Cloud security (Azure)

PowerShell / Bash scripting

Education

Bachelor’s degree in IT/Cybersecurity

2+ years DoD cybersecurity analysis

Tools

STIG Viewer

SCAP tools

Defender for Cloud

eMASS

Job description

Command Post Technologies, Inc. seeks a Vulnerability Management & Security Analyst to perform day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. You will ensure Azure workloads remain hardened and compliant with DoD standards.

The role reports to the Primary Government Project Lead and Lead Cybersecurity Specialist, delivering remediation guidance and maintaining POA&Ms in eMASS while monitoring cloud security using Defender for Cloud.