RFQ 26-04668 for Vulnerability Management Program Support and Penetration Testing Services

The Executive Office of Technology Services and Security (EOTSS) is seeking a vendor to provide Vulnerability Management Program Support, Application Security Program Support, and Penetration Testing Services. The vendor will work with the EOTSS team to enhance and sustain an enterprise Vulnerability Management Program and develop an Enterprise Application Security Program. The vendor will also provide penetration testing services across Executive Branch Agencies. The contract will have an initial term of 36 months and may be renewed or extended. Key aspects of the job include: • Providing senior-level engineering, operational, and programmatic support to enhance and sustain the Vulnerability Management Program • Developing and refining Application Security policies, standards, and SOPs • Delivering enterprise Penetration Testing Services • Aligning program processes with NIST and other relevant frameworks • Providing stakeholder education and remediation enablement support • Implementing and supporting integrations with Tenable and Veracode platforms • Developing risk-based remediation prioritization models • Supporting audit and compliance reporting requirements