{"schemaVersion":"jobsearcher.job.v1","id":"ea60edc5325a2408ca8ac2da","url":"https://jobsearcher.com/jobs/ea60edc5325a2408ca8ac2da","canonicalUrl":"https://jobsearcher.com/jobs/ea60edc5325a2408ca8ac2da","title":"Vulnerability Management & Security Analyst","description":"Description:\n\nCommand Post Technologies, Inc. is seeking a Vulnerability Management & Security Analyst to provide day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. Working under the guidance of the Primary Government Project Lead and Lead Cybersecurity Specialist, you will ensure all Azure workloads remain hardened and compliant with DoD standards.\n\nAs a Vulnerability Management & Security Analyst, your duties will include the following, but are not limited to:\n\nConduct scheduled and ad hoc vulnerability assessments across Azure Government virtual machines and network components using ACAS (Tenable Nessus).\nEvaluate and document system compliance against DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using SCAP tools and STIG Viewer.\nCollaborate with cloud and systems engineers to provide actionable remediation guidance for identified vulnerabilities and IAVAs.\nPopulate and maintain Plan of Action & Milestones (POA&M) records within eMASS to ensure accurate risk reporting to Authorizing Officials.\nMonitor cloud security hygiene using Microsoft Defender for Cloud and DISA Continuous Monitoring dashboards.\nRequirements:\nU.S. Citizenship\nActive Secret clearance.\nBachelor’s degree in Information Technology, Cybersecurity, or related field, plus 2+ years of hands-on DoW cybersecurity analysis and vulnerability scanning experience OR Associate's degree and 5 years of hands-on DoW cybersecurity analysis and vulnerability scanning experience OR High school degree and 8 years of hands-on DoW cybersecurity analysis and vulnerability scanning experience\nExperience utilizing Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for network, host, and credentialed scanning.\nPractical experience applying and verifying DISA STIGs across Linux and Windows operating systems.\nCurrent DoD 8570/8140 IAT Level II certification (e.g., CompTIA Security+ CE, CySA+, or GSEC)\nStrong problem-solving skills and ability to troubleshoot complex issues\nEffective communication and collaboration skills\n\nPreferred Qualifications\n\nActive Top Secret clearance with SCI eligibility.\nExperience configuring and running ACAS scans inside Microsoft Azure Government or AWS GovCloud environments.\nExperience utilizing PowerShell or Bash scripts to automate STIG finding verification and remediation.\nHands-on experience creating, updating, and closing POA&M entries directly in eMASS.\nFamiliarity with Microsoft Defender for Cloud, Secure Score tracking, and Azure Policy compliance states.\nStrong technical documentation, briefing, and reporting experience\n\nAbout us: We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results.\n\nWhat’s In It for You\n\nGreat health benefits (for more info, contact us directly)\nLeadership training\n401k with generous company matching\nEmployee Stock Ownership Plan (ESOP)\nCareer professional development\nTuition reimbursement\nFlexible hours\nWork/Life balance\nRewards and recognition\nPaid Time Off\nParental Leave\n\nCommand Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event.\n\nCommand Post Technologies Inc. (CPT) is an Equal Employment Opportunity and Affirmative Action employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identify, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We take Affirmative Action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.\n\nWe abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants. An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions.","company":"Command Post Technologies","rawCompany":"command post technologies","city":"Suffolk","state":"VA","isRemote":false,"isActive":true,"createdAt":"2026-10-24T09:40:15.398Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"13-1199.07","title":"Security Management Specialists","slug":"security-management-specialists"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541690","title":"Other Scientific and Technical Consulting Services","slug":"other-scientific-and-technical-consulting-services"},{"code":"541618","title":"Other Management Consulting Services","slug":"other-management-consulting-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Vulnerability Management & Security Analyst","description":"Description:\n\nCommand Post Technologies, Inc. is seeking a Vulnerability Management & Security Analyst to provide day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. Working under the guidance of the Primary Government Project Lead and Lead Cybersecurity Specialist, you will ensure all Azure workloads remain hardened and compliant with DoD standards.\n\nAs a Vulnerability Management & Security Analyst, your duties will include the following, but are not limited to:\n\nConduct scheduled and ad hoc vulnerability assessments across Azure Government virtual machines and network components using ACAS (Tenable Nessus).\nEvaluate and document system compliance against DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using SCAP tools and STIG Viewer.\nCollaborate with cloud and systems engineers to provide actionable remediation guidance for identified vulnerabilities and IAVAs.\nPopulate and maintain Plan of Action & Milestones (POA&M) records within eMASS to ensure accurate risk reporting to Authorizing Officials.\nMonitor cloud security hygiene using Microsoft Defender for Cloud and DISA Continuous Monitoring dashboards.\nRequirements:\nU.S. Citizenship\nActive Secret clearance.\nBachelor’s degree in Information Technology, Cybersecurity, or related field, plus 2+ years of hands-on DoW cybersecurity analysis and vulnerability scanning experience OR Associate's degree and 5 years of hands-on DoW cybersecurity analysis and vulnerability scanning experience OR High school degree and 8 years of hands-on DoW cybersecurity analysis and vulnerability scanning experience\nExperience utilizing Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for network, host, and credentialed scanning.\nPractical experience applying and verifying DISA STIGs across Linux and Windows operating systems.\nCurrent DoD 8570/8140 IAT Level II certification (e.g., CompTIA Security+ CE, CySA+, or GSEC)\nStrong problem-solving skills and ability to troubleshoot complex issues\nEffective communication and collaboration skills\n\nPreferred Qualifications\n\nActive Top Secret clearance with SCI eligibility.\nExperience configuring and running ACAS scans inside Microsoft Azure Government or AWS GovCloud environments.\nExperience utilizing PowerShell or Bash scripts to automate STIG finding verification and remediation.\nHands-on experience creating, updating, and closing POA&M entries directly in eMASS.\nFamiliarity with Microsoft Defender for Cloud, Secure Score tracking, and Azure Policy compliance states.\nStrong technical documentation, briefing, and reporting experience\n\nAbout us: We are Command Post Technologies, Inc. (CPT). CPT is a Service-Disabled, Veteran-Owned Small Business (SDVOSB), providing engineering services in the areas of Cyber Security, Software Development, Test & Evaluation, and Strategic Planning. CPT employees appreciate working in a caring environment that promotes a healthy work-life balance. As individuals, we come together as a team, supporting a culture rooted in our core principles of integrity, determination, and innovation. In all of CPT’s collaboration efforts, our team prioritizes communication, accountability, and being resourceful in order to maximize efficiency and results.\n\nWhat’s In It for You\n\nGreat health benefits (for more info, contact us directly)\nLeadership training\n401k with generous company matching\nEmployee Stock Ownership Plan (ESOP)\nCareer professional development\nTuition reimbursement\nFlexible hours\nWork/Life balance\nRewards and recognition\nPaid Time Off\nParental Leave\n\nCommand Post Technologies, Inc. (CPT) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) founded in 2008 and headquartered in Suffolk, VA with personnel in various states including Virginia, Maryland, Florida, and Texas. With 2/3 of our staff being former military, CPT firmly believes in employing veterans. Command Post Technologies, Inc. is a unique provider of innovative solutions that enhance our corporate clients’ productivity and empower our government clients with the ability to protect against all enemies: foreign and domestic. CPT adapts its successful military experiential approach to the needs of leaders in a global business environment and provides an elite leadership curriculum that results in a world-class, leadership-altering event.\n\nCommand Post Technologies Inc. (CPT) is an Equal Employment Opportunity and Affirmative Action employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identify, gender expression, sex, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, or membership in any other group protected by federal, state, or local law. We take Affirmative Action to ensure equal opportunities for employees and potential employees without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sex, sexual orientation, marital status, veteran status, disability genetic information, citizenship status, or membership in any other group protected by federal, state, or local law.\n\nWe abide by the Pay Transparency Nondiscrimination Provision and will refrain from discharging or otherwise discriminating against employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants. An exception exists where the employee or applicant makes the disclosure based on information obtained while performing his or her essential job functions.","datePosted":"2026-10-24T09:40:15.398Z","dateModified":"2026-10-24T09:40:15.398Z","hiringOrganization":{"@type":"Organization","name":"Command Post Technologies","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Suffolk","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"ea60edc5325a2408ca8ac2da"},"url":"https://jobsearcher.com/jobs/ea60edc5325a2408ca8ac2da"}}