Remote Vulnerability Management & Scan Operator

PingWind, Inc.; Northern (KY); Hybrid; USD 93,000 - 128,000; Full time

Benefits offered by this job

Eleven federal holidays

Paid time off

Parental leave

401k with matching

Education assistance

Medical, dental, vision

Job summary

PingWind, Inc. is seeking a skilled Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the Department of Education's FSA. Remote-based role with strong emphasis on FISMA/NIST guidance and CDM/CSAM processes.

The ideal candidate has 8+ years of experience, holds a Bachelor's degree, and can coordinate with security teams and CSAM to track findings and remediation across the program.

Qualifications

• Conduct and manage regular security vulnerability scans of IAM systems, applications, and databases using industry‑standard scanning tools.
• Support federal compliance assessments including FISMA, A-123, BOD directives, and Safeguards reviews.
• Review CDM scan results and respond to CVE data calls within required timeframes.
• Maintain POA&M in CSAM and track security findings from identification to resolution.
• Monitor CSF Scorecard ratings and provide remediation recommendations.
• Manage IAM security control inheritance statements for reuse by other FSA systems.
• Support SEIM and log management; coordinate with Security Operations Centers for real‑time data.
• Verify encryption standards (AES-256, SHA-256, TLS, FIPS 140).
• Track privileged access and PIV card issuance; maintain records of approved system access.
• Ensure compliance with records management, PII protection, 508 accessibility, and TBM reporting.

Responsibilities

• Conduct and manage regular vulnerability scans of IAM systems and databases; analyze results and plan remediation.
• Develop corrective action plans and track remediation efforts for federal compliance assessments.
• Review CDM scan results and respond to CVE data calls within required timeframes.
• Maintain and update POA&M in CSAM for security findings from identification to resolution.
• Monitor CSF Scorecard ratings and notify about compliance gaps with remediation recommendations.
• Coordinate with security teams and CSAM users to ensure proper configuration of inheritable controls.
• Support SEIM and log management; work with FSA SOCs for data collection and monitoring.
• Verify data‑at‑rest and data‑in‑transit encryption compliance (AES‑256, SHA‑256, TLS, FIPS 140).
• Report on privileged access, PIV status, and clearance compliance with proper records.
• Ensure compliance with federal records management and TBM reporting requirements.

Skills

Vulnerability Scanning

Security Compliance

Remediation Planning

FISMA/NIST Knowledge

CDM/CSAM Experience

Security Operations Coordination

Education

Bachelor's degree

Tools

Vulnerability scanning tools

CSAM tooling

Job description

PingWind, Inc. is seeking a skilled Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the Department of Education's FSA. Remote-based role with strong emphasis on FISMA/NIST guidance and CDM/CSAM processes.

The ideal candidate has 8+ years of experience, holds a Bachelor's degree, and can coordinate with security teams and CSAM to track findings and remediation across the program.