Vulnerability Mgmt / Scan Operator
Core
Conduct security vulnerability scans, analyze findings, and develop remediation plans for a federal Identity and Access Management (IAM) program.
Role type
Senior IC vulnerability management and security scanning operator
Builds
Security posture and compliance status for federal IAM systems
Domain
Federal government cybersecurity / Identity and Access Management
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
vulnerability scanning, remediation planning, federal compliance frameworks (FISMA, CISA BOD, NIST), CDM analysis, CVE data management, POA&M tracking, encryption standards verification, privileged access management, federal records management
Preferred skills
experience with AES-256, SHA-256, TLS, FIPS 140, PIV card management, Section 508 accessibility, TBM reporting
Technologies
industry-standard scanning tools, CSAM, SEIM, PIV cards
Responsibilities
Conduct and manage regular security vulnerability scans of IAM systems, applications, and databases; Support federal compliance assessments including FISMA, A-123, Binding Operational Directives (BOD), and Safeguards reviews; Review and manage Continuous Diagnostics and Monitoring (CDM) scan results; Maintain and update Plans of Action and Milestones (POA&M) in Cyber Security Assessment and Management (CSAM); Monitor and maintain IAM Cybersecurity Framework Risk (CSF) Scorecard rating; Manage IAM security control inheritance statements; Support Security Event and Incident Management (SEIM) and log management processes; Verify encryption standards compliance for data-at-rest and data-in-transit; Track and report on privileged user access and security clearance compliance; Ensure compliance with federal records management, PII protection, Section 508 accessibility standards, and Technology Business Management (TBM) reporting requirements