Description
The Executive Office of Technology Services and Security is seeking a vendor to provide Vulnerability Management Program Support, Application Security Program Support, and Penetration Testing Services. The vendor will work with the EOTSS team to enhance and sustain an enterprise Vulnerability Management Program and develop an Enterprise Application Security Program. The vendor will also provide penetration testing services across Executive Branch Agencies. The contract will have an initial term of 36 months and may be renewed or extended.
Key aspects of the job include:
* Providing senior-level engineering, operational, and programmatic support to enhance and sustain an enterprise Vulnerability Management Program
* Developing and refining Application Security policies, standards, and SOPs
* Providing penetration testing services, including annual testing capacity for up to 60 application penetration tests and 10 infrastructure penetration tests
* Collaborating with key stakeholders, including Secretariat security leads and agency technical teams
* Providing knowledge transfer and mentoring
* Meeting minimum and preferred qualifications, including experience with TenableOne and Veracode platforms