Vulnerability Management / Scan Operator
About the job
- A bachelor's degree is required.
- Eight years of experience are required.
- Experience conducting and managing regular security vulnerability scans of identity and access management systems, applications, and databases using industry-standard scanning tools is required.
- Experience analyzing scan results and developing remediation plans is required.
- Experience supporting federal compliance assessments, including FISMA, A-123, Binding Operational Directives, and Safeguards reviews, is required.
- Experience developing corrective action plans and tracking remediation efforts is required.
- Experience reviewing and managing Continuous Diagnostics and Monitoring scan results and responding to Common Vulnerabilities and Exposures data calls within required timeframes is required.
- Experience maintaining Plans of Action and Milestones in Cyber Security Assessment and Management and tracking security findings through resolution is required.
- Experience monitoring and maintaining an Identity and Access Management Cybersecurity Framework Risk Scorecard rating and identifying compliance gaps is required.
- Experience managing security control inheritance statements and configuring inheritable controls in Cyber Security Assessment and Management is required.
- Experience supporting Security Event and Incident Management and log management processes is required.
- Knowledge of encryption compliance requirements for data at rest and in transit, including Advanced Encryption Standard 256, Secure Hash Algorithm 256, Transport Layer Security protocols, and Federal Information Processing Standards 140, is required.
- Experience tracking and reporting privileged user access, including Personal Identity Verification card issuance and status changes, is required.
- Experience maintaining records of personnel with approved system access is required.
- Knowledge of federal records management, personally identifiable information protection, Section 508 accessibility standards, and Technology Business Management reporting requirements is required.
- Conduct and manage regular security vulnerability scans of identity and access management systems, applications, and databases; analyze results and develop remediation plans.
- Support federal compliance assessments, including FISMA, A-123, Binding Operational Directives, and Safeguards reviews; develop corrective action plans and track remediation efforts.
- Review and manage Continuous Diagnostics and Monitoring scan results and respond to Common Vulnerabilities and Exposures data calls within required timeframes.
- Maintain and update Plans of Action and Milestones in Cyber Security Assessment and Management; track security findings from identification through resolution.
- Monitor and maintain the Identity and Access Management Cybersecurity Framework Risk Scorecard rating; notify the Federal Student Aid office of compliance gaps and provide remediation recommendations.
- Manage Identity and Access Management security control inheritance statements and configure inheritable controls in Cyber Security Assessment and Management for use by other Federal Student Aid systems.
- Support Security Event and Incident Management and log management processes; coordinate with Federal Student Aid Security Operations Centers to ensure proper data collection and real-time monitoring.
- Verify compliance with encryption standards for data at rest and in transit, including Advanced Encryption Standard 256, Secure Hash Algorithm 256, Transport Layer Security protocols, and Federal Information Processing Standards 140 requirements.
- Track and report privileged user access, including Personal Identity Verification card issuance and status changes, and maintain records of personnel with approved system access.
- Ensure compliance with federal records management, personally identifiable information protection, Section 508 accessibility standards, and Technology Business Management reporting requirements.
About the company
PingWind is a service provider that combines cybersecurity, information technology, and supply chain services to help clients secure information, modernize systems, and optimize performance. It offers services rather than a single product, applying its CVE certification to security work. The company’s solutions work by assessing and protecting information systems, upgrading and integrating IT infrastructure, and improving supply chain resilience, with a focus on reducing risk and increasing efficiency. PingWind differentiates itself through its SDVOSB and HUBZone certifications, signaling veteran-owned status and eligibility for government contracts, along with a specialized blend of cybersecurity, IT, and supply chain expertise. The company’s goal is to help clients secure information, modernize their technology environments, and optimize operational performance.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Washington DC, District of Columbia
Founded
2012
Get referred to PingWind
See people who can refer or advise you
Simplify's Take
What believers are saying
- On June 9, 2026, PingWind became a prime on VA's $22.3B T4NG.
- CVPS II won a $73.3M Education Department One IAMS award on April 16, 2026.
- PingWind's 2026 news adds MDA SHIELD, INSCOM, ARISS, and AHRQ contract wins.
What critics are saying
- PrimeRFP shows one $2.9M PingWind contract expires September 14, 2026.
- PingWind reports only $15.3M across five actions, leaving revenue concentrated.
- If VA T4NG2 or Polaris awards slip, PingWind loses its core federal growth engine.
What makes PingWind unique
- PingWind is SDVOSB and HUBZone certified, positioning it for set-aside federal work.
- Its 2026 contract slate spans VA T4NG2, GSA Polaris, SEWP VI, and ITES-3S.
- The company pairs cybersecurity, IT modernization, and supply-chain services for mission agencies.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Paid Federal Holidays
Health Insurance
Dental Insurance
401(k) Company Match
Paid Vacation
Paid Sick Leave
Continuing education assistance
Short Term / Long Term Disability & Life Insurance
Employee Assistance Program
Company News
ANNANDALE, VA, USA, November 17, 2023 / EINPresswire.com / -- PingWind Inc., a leading provider of cyber, IT, software development, and management consulting solutions for federal agencies, is proud to announce that its Chief Technology Officer, Luis Ibarra, has been recognized as one of the " Top 10 CTOs to Watch in 2024 " by the prestigious International Business Times.
Jerome June Jr. recently joined PingWind’s Talent Acquisition team.
PingWind earned the gold award after applying earlier this year.
PingWind today announced that it was selected as a finalist for the 14th Annual Small and Emerging Contractors Advisory Forum (SECAF) Awards.
PingWind was recently awarded a 3-year, $4M task with the Department of Veterans Affairs to provide Information Technology Systems Integration (ITSI) Operations and Maintenance (O&M) services.