Vulnerability Management & Security Analyst

Command Post Technologies, Inc. is seeking a Vulnerability Management & Security Analyst to provide day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. Working under the guidance of the Primary Government Project Lead and Lead Cybersecurity Specialist, you will ensure all Azure workloads remain hardened and compliant with DoD standards.

As a Vulnerability Management & Security Analyst, your duties will include the following, but are not limited to:

• Conduct scheduled and ad hoc vulnerability assessments across Azure Government virtual machines and network components using ACAS (Tenable Nessus).
• Evaluate and document system compliance against DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using SCAP tools and STIG Viewer.
• Collaborate with cloud and systems engineers to provide actionable remediation guidance for identified vulnerabilities and IAVAs.
• Populate and maintain Plan of Action & Milestones (POA&M) records within eMASS to ensure accurate risk reporting to Authorizing Officials.
• Monitor cloud security hygiene using Microsoft Defender for Cloud and DISA Continuous Monitoring dashboards.