Description
The Executive Office of Technology Services and Security is seeking a vendor to provide professional cybersecurity services, including vulnerability management program support, application security program support, and penetration testing services. The vendor will work under the direction of the EOTSS Vulnerability Management Services Manager and collaborate with key stakeholders. The services shall be delivered in alignment with Commonwealth security standards, industry best practices, and measurable risk reduction objectives. The contract is expected to have an initial term of 36 months, with the possibility of renewal or extension.
Key aspects of the job include:
* Providing senior-level engineering, operational, and programmatic support to enhance and sustain an enterprise Vulnerability Management Program
* Developing and refining Application Security policies, standards, and procedures
* Delivering enterprise Penetration Testing Services, including annual testing capacity for up to 60 application penetration tests and 10 infrastructure penetration tests
* Providing knowledge transfer and mentoring to EOTSS staff
* Meeting minimum performance standards, including resource availability, critical platform incident response, and dashboard/report updates