{"schemaVersion":"jobsearcher.job.v1","id":"7fa9363b61077c3db3bd6fde","url":"https://jobsearcher.com/jobs/7fa9363b61077c3db3bd6fde","canonicalUrl":"https://jobsearcher.com/jobs/7fa9363b61077c3db3bd6fde","title":"Cloud Vulnerability & Patch Analyst","description":"ARS is seeking a skilled Cloud Vulnerability & Patch Analyst to assist in the monitoring and security hardening of a DevSecOps cloud environment to align with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) security requirements.\n\nARS is seeking a highly skilled Cloud Vulnerability & Patch Analyst to support the continuous monitoring, assessment, patching and hardening of a modern DevSecOps cloud environment. The analyst will play a critical role in identifying, validating, and mitigating vulnerabilities across Azure-based infrastructure and containerized workloads while ensuring alignment with DoD Risk Management Framework (RMF) controls defined in NIST SP 800-53 Rev. 5 and the CMMC 2.0 requirements derived from NIST SP 800-171. This role will leverage enterprise-grade security tools, including ACAS, Tenable Nessus, Microsoft Defender for Cloud, and Microsoft Sentinel, to perform vulnerability scanning, log correlation, threat hunting, and compliance reporting. The analyst will also contribute to secure DevSecOps pipelines by integrating automated security checks, ensuring misconfigurations are addressed early, and maintaining hardened baselines consistent with DoD and industry cybersecurity best practices.\n\nIn addition, the Cloud Vulnerability & Patch Analyst will help shape and enforce proactive cloud security strategies by analyzing threat intelligence, validating remediation actions, and collaborating with engineering teams to eliminate systemic risks. The role requires strong knowledge of Azure security architecture, cloud access control models, vulnerability lifecycle management, and the technical controls necessary for FedRAMP-high-equivalent and DoD cloud deployments. The analyst will be responsible for developing documentation, dashboards, and continuous improvement recommendations that enhance situational awareness and strengthen security posture. Ultimately, the position ensures that ARS’s cloud environment remains resilient, compliant, and aligned with the evolving landscape of DoD cybersecurity expectations and modern cloud security best practices.\n\nWhy Work with us?\n\nApplied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.\n\nResponsibilities include:\n\nConduct recurring vulnerability scans using ACAS, Tenable Nessus, Microsoft Defender for Cloud, and other automated tools to identify security gaps across Azure cloud environments.\nAnalyze and correlate alerts and logs within Microsoft Sentinel to detect threats, suspicious activity, and compliance deviations.\nPerform vulnerability triage, validation, and prioritization, ensuring remediation aligns with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) requirements.\nDevelop, maintain, and harden secure baseline configurations for Azure services, virtual machines, containers, and DevSecOps tooling.\nImplement and monitor CI/CD-integrated security controls to ensure early detection of misconfigurations and code-level vulnerabilities.\nCollaborate with cloud engineers, developers, and ISSO/ISSM personnel to recommend remediation actions and validate corrective measures.\nPrepare detailed vulnerability reports, dashboards, Plan of Action & Milestones (POA&M) updates, and compliance artifacts for audits and assessments.\nSupport continuous monitoring strategies and security automation initiatives to enhance overall cloud security posture.\nConduct threat hunting and security analysis using threat intelligence sources to identify emerging risks relevant to Azure cloud and DoD systems.\nPromote cybersecurity best practices by providing guidance, training, and technical recommendations to stakeholders across DevSecOps teams.\nOther duties as assigned\n\nQualifications/ Technical Experience Requirements:\n\nMust be a US citizen\nActive Secret security clearance\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field (or equivalent practical experience).\nHands-on experience with vulnerability scanning tools such as ACAS, Tenable Nessus, Microsoft Defender for Cloud, or similar enterprise solutions.\nWorking knowledge of Microsoft Azure, including security architecture, identity management, and cloud configuration best practices.\nFamiliarity with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 / NIST SP 800-171 security control requirements.\nExperience analyzing security events using SIEM platforms such as Microsoft Sentinel.\nStrong understanding of vulnerability management principles, secure configuration baselines, and cybersecurity best practices.\nAbility to create clear documentation, communicate findings, and collaborate effectively with DevSecOps, engineering, and compliance teams.\n\n All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.\n\nThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.\n\nThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.\n\nEqual Opportunity Employer/Protected Veterans/Individuals with Disabilities\nThis employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.","company":"Applied Research Solutions","rawCompany":"applied research solutions","city":"Denver","state":"CO","isRemote":false,"isActive":false,"createdAt":"2026-10-09T10:51:01.131Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Cloud Vulnerability & Patch Analyst","description":"ARS is seeking a skilled Cloud Vulnerability & Patch Analyst to assist in the monitoring and security hardening of a DevSecOps cloud environment to align with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) security requirements.\n\nARS is seeking a highly skilled Cloud Vulnerability & Patch Analyst to support the continuous monitoring, assessment, patching and hardening of a modern DevSecOps cloud environment. The analyst will play a critical role in identifying, validating, and mitigating vulnerabilities across Azure-based infrastructure and containerized workloads while ensuring alignment with DoD Risk Management Framework (RMF) controls defined in NIST SP 800-53 Rev. 5 and the CMMC 2.0 requirements derived from NIST SP 800-171. This role will leverage enterprise-grade security tools, including ACAS, Tenable Nessus, Microsoft Defender for Cloud, and Microsoft Sentinel, to perform vulnerability scanning, log correlation, threat hunting, and compliance reporting. The analyst will also contribute to secure DevSecOps pipelines by integrating automated security checks, ensuring misconfigurations are addressed early, and maintaining hardened baselines consistent with DoD and industry cybersecurity best practices.\n\nIn addition, the Cloud Vulnerability & Patch Analyst will help shape and enforce proactive cloud security strategies by analyzing threat intelligence, validating remediation actions, and collaborating with engineering teams to eliminate systemic risks. The role requires strong knowledge of Azure security architecture, cloud access control models, vulnerability lifecycle management, and the technical controls necessary for FedRAMP-high-equivalent and DoD cloud deployments. The analyst will be responsible for developing documentation, dashboards, and continuous improvement recommendations that enhance situational awareness and strengthen security posture. Ultimately, the position ensures that ARS’s cloud environment remains resilient, compliant, and aligned with the evolving landscape of DoD cybersecurity expectations and modern cloud security best practices.\n\nWhy Work with us?\n\nApplied Research Solutions (ARS) is respected as a world-class provider of technically integrated solutions as we deliver premier talent and technology across our focused markets for unparalleled, continuous mission support. Awarded a Best Places to Work nominee since 2020, ARS recognizes that without our career- driven, loyal professionals, we would not be able to deliver state-of-the-art results for our mission partners. We firmly believe that prioritizing our employees is of the upmost importance. We provide a culture where our employees are challenged to meet their career goals and aspirations, while still obtaining a work/life balance. ARS employees are motivated through our industry competitive benefits package, our awards and recognition program, and personalized attention from ARS Senior Managers.\n\nResponsibilities include:\n\nConduct recurring vulnerability scans using ACAS, Tenable Nessus, Microsoft Defender for Cloud, and other automated tools to identify security gaps across Azure cloud environments.\nAnalyze and correlate alerts and logs within Microsoft Sentinel to detect threats, suspicious activity, and compliance deviations.\nPerform vulnerability triage, validation, and prioritization, ensuring remediation aligns with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) requirements.\nDevelop, maintain, and harden secure baseline configurations for Azure services, virtual machines, containers, and DevSecOps tooling.\nImplement and monitor CI/CD-integrated security controls to ensure early detection of misconfigurations and code-level vulnerabilities.\nCollaborate with cloud engineers, developers, and ISSO/ISSM personnel to recommend remediation actions and validate corrective measures.\nPrepare detailed vulnerability reports, dashboards, Plan of Action & Milestones (POA&M) updates, and compliance artifacts for audits and assessments.\nSupport continuous monitoring strategies and security automation initiatives to enhance overall cloud security posture.\nConduct threat hunting and security analysis using threat intelligence sources to identify emerging risks relevant to Azure cloud and DoD systems.\nPromote cybersecurity best practices by providing guidance, training, and technical recommendations to stakeholders across DevSecOps teams.\nOther duties as assigned\n\nQualifications/ Technical Experience Requirements:\n\nMust be a US citizen\nActive Secret security clearance\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related technical field (or equivalent practical experience).\nHands-on experience with vulnerability scanning tools such as ACAS, Tenable Nessus, Microsoft Defender for Cloud, or similar enterprise solutions.\nWorking knowledge of Microsoft Azure, including security architecture, identity management, and cloud configuration best practices.\nFamiliarity with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 / NIST SP 800-171 security control requirements.\nExperience analyzing security events using SIEM platforms such as Microsoft Sentinel.\nStrong understanding of vulnerability management principles, secure configuration baselines, and cybersecurity best practices.\nAbility to create clear documentation, communicate findings, and collaborate effectively with DevSecOps, engineering, and compliance teams.\n\n All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.\n\nThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability, and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities.\n\nThis contractor and subcontractor shall abide by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans, and requires affirmative action by covered contractors and subcontractors to employ and advance in employment qualified protected veterans.\n\nEqual Opportunity Employer/Protected Veterans/Individuals with Disabilities\nThis employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights (https://www.eeoc.gov/poster) notice from the Department of Labor.","datePosted":"2026-10-09T10:51:01.131Z","dateModified":"2026-10-09T10:51:01.131Z","hiringOrganization":{"@type":"Organization","name":"Applied Research Solutions","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Denver","addressRegion":"CO","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"7fa9363b61077c3db3bd6fde"},"url":"https://jobsearcher.com/jobs/7fa9363b61077c3db3bd6fde"}}