On Call Vulnerability Scanning Jobs (NOW HIRING)

Job Summary:
The U.S. Securities and Exchange Commission is seeking a Vulnerability Management Program Engineer in the Office of Information Technology. This role involves leading enterprise vulnerability lifecycle operations across various environments, optimizing vulnerability scanning platforms, and integrating security tools into CI/CD pipelines.
Responsibilities:
• Leading enterprise vulnerability management operations from discovery and triage through remediation and validation
• Engineering and integrating vulnerability management solutions including developing and enforcing automated security gates and policies
• Analyzing, prioritizing, and driving risk reduction by performing expert analysis of vulnerability data and converting results into actionable remediation guidance
• Building and maintaining dashboards to measure remediation progress, program maturity, and risk trends
• Supporting cloud and hybrid network architectures, including troubleshooting complex hybrid issues (TLS/SSL, reverse proxies, segmentation, and distributed scanning nodes)
• Aligning all vulnerability management operations to internal policies and federal laws, regulations, and requirements, including NIST SP 800-53, SP 800-137, CIS Benchmarks, DISA STIGs, and FedRAMP requirements
Qualifications:
Required:
• CITZENSHIP: You must be a US Citizen.
• SELECTIVE SERVICE: Males born after 12/31/59 must be registered or exempt from Selective Service (see https://www.sss.gov/).
• SECURITY CLEARANCE: Entrance on duty is contingent upon completion of a pre-employment security investigation. Favorable results on a Background Investigation may be a condition of employment or selection to another position.
• PERMANENT CHANGE OF STATION (PCS): Moving/Relocation expenses are not authorized.
• DIRECT DEPOSIT: All Federal employees are required to have Federal salary payments made by direct deposit to a financial institution of their choosing.
• PROBATIONARY PERIOD: This appointment may require completion of a one-year probationary period.
• The selectee is required to report to the duty station(s) listed.
• The duties of this position may require the incumbent to carry a cell phone and be on call 24 hours a day, seven days a week on a rotational basis, based on the needs of the organization.
• Attention to Detail - Is thorough when performing work and conscientious about attending to detail.
• Customer Service - Works with clients and customers to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations.
• Oral Communication - Expresses information to individuals or groups effectively, taking into account the audience and nature of the information.
• Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations.
• Executing and managing enterprise vulnerability scanning across on-prem, cloud, and hybrid environments.
• Engineering, configuring, or optimizing vulnerability management platforms (Qualys, Tenable, Nessus, or equivalent).
• Performing vulnerability triage and risk scoring to develop remediation recommendations for system owners.
• Applying NIST, CIS Benchmarks, DISA STIG, or FedRAMP standards in vulnerability management or compliance operations.
• Information Systems/Network Security - Implements and uses methods, tools, and procedures to prevent information systems vulnerabilities.
• Technology Expertise - Knowledge of the principles and methods of specialized technologies, tools, and delivery systems.
• Risk Management and Disaster Recovery - Uses methods and tools for risk assessment and mitigation of risk.
• Problem Solving and Decision Making - Ability to identify and solve important problems relevant to program areas through sound and timely decision making.
Company:
SEC holds primary responsibility for enforcing the federal securities laws and regulating the securities industry. Founded in 1934, the company is headquartered in Washington, USA, with a team of 1001-5000 employees. The company is currently Late Stage.