Vulnerability Management / Scan Operator

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform and oversee routine security vulnerability assessments of IAM systems, applications, and databases

• Evaluate scan outcomes and create remediation strategies

• Assist in federal compliance evaluations, including FISMA, A-123, BOD, and Safeguards reviews

• Formulate corrective action plans and monitor remediation activities

• Examine and manage CDM scan outcomes and respond to CVE data requests within specified timelines

• Maintain and revise POA&Ms in CSAM, tracking findings until resolution

• Oversee and sustain the IAM CSF Scorecard rating

• Inform FSA of compliance deficiencies and offer remediation suggestions

• Manage IAM security control inheritance declarations and set up Inheritable Controls in CSAM

• Support SEIM and logging management processes

• Collaborate with FSA Security Operations Centers for data gathering and real-time monitoring

• Confirm encryption adherence for data-at-rest and data-in-transit

• Monitor and report privileged user access, PIV card issuance, status updates, and clearance compliance

• Ensure adherence to federal records management, PII protection, Section 508, and TBM reporting standards

• Work together with security teams, system administrators, and compliance officers to uphold FSA IAM security posture and compliance

⛳️ Requirements

• Public Trust clearance required

• Bachelor’s degree necessary

• 8 years of relevant experience

• Proven experience in conducting and managing security vulnerability assessments of IAM systems, applications, and databases

• Proficient in utilizing industry-standard scanning tools, interpreting results, and creating remediation plans

• Familiarity with FISMA, A-123, Binding Operational Directives (BOD), Safeguards reviews, CISA BOD directives, and NIST guidance

• Experience with CDM scan results and responding to CVE data calls

• Skilled in maintaining POA&Ms in CSAM

• Experience in monitoring IAM Cybersecurity Framework Risk (CSF) Scorecard ratings

• Proficient in managing security control inheritance statements and Inheritable Controls in CSAM

• Experience in supporting SEIM and logging management processes

• Knowledge of AES-256, SHA-256, TLS protocols, and FIPS 140 standards

• Experience in tracking privileged user access, PIV card issuance, and security clearance compliance

• Understanding of federal records management, PII protection, Section 508, and TBM reporting requirements

🏝️ Benefits

• Eleven Federal Holidays

• Paid Time Off accrued each pay period

• Parental Leave

• Three medical plan options with generous employer contributions

• Dental and Vision Insurance

• Company-paid Short-Term and Long-Term Disability

• Company-paid Life and AD&D Insurance

• 401k with competitive matching and vesting schedule

• Continuing education assistance

• Medical, Dependent Care, and Commuter Flexible Spending Accounts

• Employee Assistance Program

• Wellness benefits including Calm Health app and WellHub gym subsidy

• 529 College Savings Plan

• Legal Insurance

• Pet Insurance