Remote Vulnerability Management & Scan Operator

PingWind, Inc.; United States; Presencial; USD 93.000 - 128.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid Time Off

Medical plans

Dental Insurance

Vision Insurance

401k

Life Insurance

Parental Leave

Education assistance

Wellness program

Employee Assistance

Descripción de la vacante

PingWind is seeking a skilled Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the U.S. Department of Education’s FSA office.

The role emphasizes security scanning, remediation planning, and adherence to FISMA and NIST guidance. The position requires a Public Trust clearance, a Bachelor's degree, and 8 years of experience.

Formación

• Conduct and manage regular security vulnerability scans of IAM systems, applications, and databases using industry-standard scanning tools; analyze results and develop remediation plans.
• Support federal compliance assessments including FISMA, A-123, Binding Operational Directives (BOD), and Safeguards reviews; develop corrective action plans and track remediation efforts.
• Review and manage Continuous Diagnostics and Monitoring (CDM) scan results; respond to CVE data calls within required timeframes.
• Maintain and update Plans of Action and Milestones (POA&M) in CSAM; ensure findings tracked from identification through resolution.
• Monitor IAM Cybersecurity Framework (CSF) Scorecard; notify of compliance gaps and provide remediation recommendations.
• Manage IAM security control inheritance statements and ensure Inheritable Controls are configured in CSAM.
• Support Security Event and Incident Management (SEIM) and log management with Security Ops centers for real-time monitoring.
• Verify encryption standards for data-at-rest and data-in-transit (AES-256, SHA-256, TLS, FIPS 140).
• Track and report privileged user access including PIV cards and clearance compliance.
• Ensure compliance with records management, PII protection, Section 508, TBM reporting.

Responsabilidades

• Maintain security posture and ensure compliance status for FSA IAM systems.
• Collaborate with security teams, SysAdmins, and compliance officers to identify findings and develop remediation strategies.

Conocimientos

Vulnerability management

Security scanning

Remediation planning

Compliance frameworks

CDM scanning

CSAM/POA&M tracking

Security monitoring

Encryption standards

Access control review

Educación

Bachelor's degree

Herramientas

Industry-standard scanning tools

Descripción del empleo

PingWind is seeking a skilled Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the U.S. Department of Education’s FSA office.

The role emphasizes security scanning, remediation planning, and adherence to FISMA and NIST guidance. The position requires a Public Trust clearance, a Bachelor's degree, and 8 years of experience.