Vulnerability Management & Security Analyst

Torch Technologies
  • Huntsville, Alabama
    6 days ago

    Job Description

    Torch Technologies

    Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation’s top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: “Lighting the Pathway of Freedom”. And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!


    Torch Technologies is seeking a Vulnerability Management & Security Analyst to provide day-to-day scanning, STIG assessment, and remediation tracking for J7 JTSD's cloud migration systems. Working under the guidance of the Primary Government Project Lead and Lead Cybersecurity Specialist, you will ensure all Azure workloads remain hardened and compliant with DoD standards.


    As a Vulnerability Management & Security Analyst your duties will include the following, but are not limited to:


    • Conduct scheduled and ad-hoc vulnerability assessments across Azure Government virtual machines and network components using ACAS (Tenable Nessus).
    • Evaluate and document system compliance against DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using SCAP tools and STIG Viewer.
    • Collaborate with cloud and systems engineers to provide actionable remediation guidance for identified vulnerabilities and IAVAs.
    • Populate and maintain Plan of Action & Milestones (POA&M) records within eMASS to ensure accurate risk reporting to Authorizing Officials.
    • Monitor cloud security hygiene using Microsoft Defender for Cloud and DISA Continuous Monitoring dashboards.

    Qualifications


    • U.S. Citizenship
    • Active DoW Secret clearance.
    • Bachelor’s degree in Information Technology, Cybersecurity, or related field, plus 2+ years of hands-on DoD cybersecurity analysis and vulnerability scanning experience (or 5+ years without degree).
    • 2+ years utilizing Assured Compliance Assessment Solution (ACAS) / Tenable Nessus for network, host, and credentialed scanning.
    • Practical experience applying and verifying DISA STIGs across Linux and Windows operating systems.
    • Current DoD 8570/8140 IAT Level II certification (e.g., CompTIA Security+ CE, CySA+, or GSEC)
    • Strong problem‑solving skills and ability to troubleshoot complex issues
    • Effective communication and collaboration skills

    Preferred Qualifications


    • Active Top Secret clearance with SCI eligibility.
    • Experience configuring and running ACAS scans inside Microsoft Azure Government or AWS GovCloud environments.
    • Experience utilizing PowerShell or Bash scripts to automate STIG finding verification and remediation.
    • Hands-on experience creating, updating, and closing POA&M entries directly in eMASS.
    • Familiarity with Microsoft Defender for Cloud, Secure Score tracking, and Azure Policy compliance states.
    • Strong technical documentation, briefing, and reporting experience

    Schedule: M-F; 8-5
    Work Location:  Suffolk, VA or Huntsville, AL – Hybrid / Flexible On-Site.
    Travel: Yes, 0-10%
    Relocation Assistance Available: No
    Position Contingent Upon Award of Contract: No

    Salary Range for VA: $105,000-$128,000

    The salary range information is a general guideline only.  Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate’s qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications.


    #LI-DK1






    Benefits: 

     

    Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.  

     

     

    Applying to Torch Technologies: 

     

    Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check. 

    ­

    All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law.  Torch Technologies, Inc. participates in E-Verify. 

     

     

    If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Careers Linkas a result of your disability. You can request reasonable accommodations by sending an email to HR@torchtechnologies.com. Thank you for your interest in Torch Technologies. 

    Numbers & Facts

    LocationHuntsville, Alabama

    Skills

    • Advertising Schedulingunmatched
    • Aerospace and Defenseunmatched
    • Amazon Web Services (AWS)unmatched
    • Bash Scriptingunmatched
    • Cloud Computingunmatched
    • Communication Skillsunmatched
    • CompTIA Security+unmatched
    • Computer Securityunmatched
    • Defense Information Systems Agency (DISA)unmatched
    • DoD Directive 8140unmatched
    • DoD Directive 8570unmatched
    • Federal Governmentunmatched
    • GSEC - GIAC Security Essentials Certificationunmatched
    • Governmentunmatched
    • IAT - Information Assurance Technicalunmatched
    • Identify Issuesunmatched
    • Information Technology & Information Systemsunmatched
    • Internet Securityunmatched
    • Linux Operating Systemunmatched
    • Maintain Complianceunmatched
    • Microsoft Product Familyunmatched
    • Microsoft Windows Azureunmatched
    • Microsoft Windows Operating Systemunmatched
    • Military/DoD Standardsunmatched
    • Nessusunmatched
    • Problem Solving Skillsunmatched
    • Reporting Dashboardsunmatched
    • Reporting Skillsunmatched
    • Research & Development (R&D)unmatched
    • Riskunmatched
    • Secret Clearanceunmatched
    • Security Analysisunmatched
    • Security Monitoringunmatched
    • Systems Engineeringunmatched
    • Team Playerunmatched
    • Technical Presentationunmatched
    • Technical Writingunmatched
    • United States Citizenunmatched
    • United States Department of Defense (DoD)unmatched
    • Virtual Machine (VM)unmatched
    • Vulnerability Scannersunmatched
    • Windows PowerShellunmatched

    Be found by employers

    5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Free resume builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Free resume builder