Remote IAM Vulnerability & Security Compliance Lead

PingWind; United States; Remote; USD 93,000 - 128,000; Full time

Benefits offered by this job

Exceptional health benefits

Paid time off

Federal holidays

401k plan with match

Education assistance

Disability & Life Insurance

Wellness programs

Job summary

PingWind is seeking a Vulnerability Management / Scan Operator for a federal IAM program within the U.S. Department of Education’s FSA office. The role emphasizes security scanning, remediation planning, and compliance against FISMA, NIST, and related directives.

The candidate should hold a Bachelor's degree, 8+ years of experience, and a Public Trust clearance. This remote position supports federal cybersecurity operations and CSAM/POA&M tracking across IAM systems.

Qualifications

• Experience conducting regular vulnerability scans and managing remediation plans.
• Familiarity with federal cybersecurity frameworks (FISMA, NIST).
• Experience with CDM scan results and CSAM records.

Responsibilities

• Conduct and manage regular security vulnerability scans of IAM systems, applications, and databases; analyze results and remediation plans.
• Support federal compliance assessments (FISMA, A-123, BOD) and track corrective actions.
• Review CDM scan results and respond to CVE data calls within deadlines.
• Maintain POA&M in CSAM and track findings from identification to resolution.
• Monitor CSF Scorecard and report gaps with remediation recommendations.
• Ensure proper IAM control inheritance and CSAM configuration reuse.
• Support SEIM and log management with SOC coordination for real-time monitoring.
• Verify data-at-rest and data-in-transit encryption (AES-256, SHA-256, TLS, FIPS 140).
• Track privileged access and PIV status; maintain records of approved system access.
• Ensure compliance with records management, PII protection, and TBM reporting.

Skills

Vulnerability Scanning

Remediation Planning

FISMA Compliance

NIST Standards

CDM Scans

CSAM

Education

Bachelor's Degree

Tools

CSAM

Job description

PingWind is seeking a Vulnerability Management / Scan Operator for a federal IAM program within the U.S. Department of Education’s FSA office. The role emphasizes security scanning, remediation planning, and compliance against FISMA, NIST, and related directives.

The candidate should hold a Bachelor's degree, 8+ years of experience, and a Public Trust clearance. This remote position supports federal cybersecurity operations and CSAM/POA&M tracking across IAM systems.