> Markdown version of [/jobs/ext/3650963-cloud-vulnerability-patch-analyst](https://www.wearedevelopers.com/jobs/ext/3650963-cloud-vulnerability-patch-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Vulnerability & Patch Analyst

- **Company:** Applied Research Solutions
- **Location:** Dayton, OH, United States
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Identity and Access Management, Security Information and Event Management, Virtual Machines, Software Vulnerability Management, Containerization, Information Technology, Cybercrime, Tenable Nessus, Microsoft Sentinel, Devsecops, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 9, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3426262743&tx=KL3737FFF&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Must be a US citizen
 * Active Secret security clearance
 * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical field (or equivalent practical experience).
 * Hands-on experience with vulnerability scanning tools such as ACAS, Tenable Nessus, Microsoft Defender for Cloud, or similar enterprise solutions.
 * Working knowledge of Microsoft Azure, including security architecture, identity management, and cloud configuration best practices.
 * Familiarity with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 / NIST SP 800-171 security control requirements.
 * Experience analyzing security events using SIEM platforms such as Microsoft Sentinel.
 * Strong understanding of vulnerability management principles, secure configuration baselines, and cybersecurity best practices.
 * Ability to create clear documentation, communicate findings, and collaborate effectively with DevSecOps, engineering, and compliance teams.

All positions at Applied Research Solutions are subject to background investigations. Employment is contingent upon successful completion of a background investigation including criminal history and identity check.

## Description

ARS is seeking a skilled Cloud Vulnerability & Patch Analyst to assist in the monitoring and security hardening of a DevSecOps cloud environment to align with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) security requirements.

ARS is seeking a highly skilled Cloud Vulnerability & Patch Analyst to support the continuous monitoring, assessment, patching and hardening of a modern DevSecOps cloud environment. The analyst will play a critical role in identifying, validating, and mitigating vulnerabilities across Azure-based infrastructure and containerized workloads while ensuring alignment with DoD Risk Management Framework (RMF) controls defined in NIST SP 800-53 Rev. 5 and the CMMC 2.0 requirements derived from NIST SP 800-171. This role will leverage enterprise-grade security tools, including ACAS, Tenable Nessus, Microsoft Defender for Cloud, and Microsoft Sentinel, to perform vulnerability scanning, log correlation, threat hunting, and compliance reporting. The analyst will also contribute to secure DevSecOps pipelines by integrating automated security checks, ensuring misconfigurations are addressed early, and maintaining hardened baselines consistent with DoD and industry cybersecurity best practices.

In addition, the Cloud Vulnerability & Patch Analyst will help shape and enforce proactive cloud security strategies by analyzing threat intelligence, validating remediation actions, and collaborating with engineering teams to eliminate systemic risks. The role requires strong knowledge of Azure security architecture, cloud access control models, vulnerability lifecycle management, and the technical controls necessary for FedRAMP-high-equivalent and DoD cloud deployments. The analyst will be responsible for developing documentation, dashboards, and continuous improvement recommendations that enhance situational awareness and strengthen security posture. Ultimately, the position ensures that ARS's cloud environment remains resilient, compliant, and aligned with the evolving landscape of DoD cybersecurity expectations and modern cloud security best practices., * Conduct recurring vulnerability scans using ACAS, Tenable Nessus, Microsoft Defender for Cloud, and other automated tools to identify security gaps across Azure cloud environments.

 * Analyze and correlate alerts and logs within Microsoft Sentinel to detect threats, suspicious activity, and compliance deviations.
 * Perform vulnerability triage, validation, and prioritization, ensuring remediation aligns with DoD RMF (NIST SP 800-53 r5) and CMMC 2.0 (NIST SP 800-171) requirements.
 * Develop, maintain, and harden secure baseline configurations for Azure services, virtual machines, containers, and DevSecOps tooling.
 * Implement and monitor CI/CD-integrated security controls to ensure early detection of misconfigurations and code-level vulnerabilities.
 * Collaborate with cloud engineers, developers, and ISSO/ISSM personnel to recommend remediation actions and validate corrective measures.
 * Prepare detailed vulnerability reports, dashboards, Plan of Action & Milestones (POA&M) updates, and compliance artifacts for audits and assessments.
 * Support continuous monitoring strategies and security automation initiatives to enhance overall cloud security posture.
 * Conduct threat hunting and security analysis using threat intelligence sources to identify emerging risks relevant to Azure cloud and DoD systems.
 * Promote cybersecurity best practices by providing guidance, training, and technical recommendations to stakeholders across DevSecOps teams.
 * Other duties as assigned