Remote Vulnerability Scan & Remediation Lead

Socket.dev; United States; Remote; USD 93,000 - 128,000; Full time

Benefits offered by this job

Eleven Federal Holidays

Paid Time Off

Parental Leave

Medical plan options

Dental and Vision Insurance

Short-Term and Long-Term Disability

Life and AD&D Insurance

401k with matching

Job summary

PingWind is seeking a Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the U.S. Department of Education’s Federal Student Aid (FSA) office.

The ideal candidate brings strong expertise in security scanning, vulnerability assessment, remediation planning, and federal cybersecurity frameworks such as FISMA, NIST, and BOD directives.

Qualifications

• Conduct and manage regular security vulnerability scans of IAM systems, applications, and databases; analyze results and remediation plans.
• Support federal compliance assessments including FISMA, A-123, Binding Operational Directives (BOD), and Safeguards; develop corrective action plans.
• Review and manage Continuous Diagnostics and Monitoring (CDM) scan results; respond to CVE data calls within required timeframes.
• Maintain and update Plans of Action and Milestones (POA&M) in CSAM; ensure security findings tracked from identification through resolution.
• Monitor IAM CSF Scorecard rating; notify FSA of any compliance gaps and provide remediation recommendations.
• Manage IAM security control inheritance statements and ensure Inheritable Controls are properly configured in CSAM.

Responsibilities

• This position plays a pivotal role in maintaining the security posture and compliance status of FSA's IAM systems.
• The Vulnerability Management / Scan Operator works with security teams, system admins, and compliance officers to identify findings and remediation strategies.
• Ensure adherence to federal cybersecurity standards including FISMA, CISA BOD directives, and NIST guidance.
• Coordinate with Security Operations Centers to ensure proper data collection and real-time monitoring.
• Track and report on encryption standards and privileged access governance across IAM environments.

Skills

Vulnerability management

Security scanning

Remediation planning

Compliance knowledge (FISMA/NIST)

CDM/CSAM experience

Education

Bachelor's degree

Job description

PingWind is seeking a Vulnerability Management / Scan Operator to support vulnerability identification, remediation, and security compliance for a federal IAM program within the U.S. Department of Education’s Federal Student Aid (FSA) office.

The ideal candidate brings strong expertise in security scanning, vulnerability assessment, remediation planning, and federal cybersecurity frameworks such as FISMA, NIST, and BOD directives.