Cybersecurity SME - KEV/BOD Analysis; Pen-Test Governance
Summary
Analyzes cybersecurity vulnerabilities and federal directives, governs penetration testing, and advises on remediation priorities for government clients.
About QBE, LLC
QBE, LLC is a small business dedicated to delivering innovative technology, cybersecurity, and mission-support solutions to federal government customers. Our experienced professionals work closely with our customers to solve complex challenges, protect critical information, and support essential government missions.
At QBE, we turn the possible into the proven.
Overview
QBE, LLC is seeking a Cybersecurity SME - KEV/BOD Analysis; Pen-Test Governance to provide expert vulnerability risk analysis, federal directive support, and penetration-testing governance for NIH/OD-OIT.
This position is primarily remote but will require some TDY.
Responsibilities
• Analyze Known Exploited Vulnerabilities and applicable federal cybersecurity directives.
• Determine organizational impact and support prioritization of required remediation activities.
• Track compliance with vulnerability-related directives and remediation deadlines.
• Provide expert risk analysis for critical and actively exploited vulnerabilities.
• Develop reports, dashboards, and executive briefings on KEV and directive compliance.
• Establish governance processes for penetration testing activities.
• Review penetration-test scope, rules of engagement, methods, and deliverables.
• Track penetration-test findings through remediation and closure.
• Evaluate risk exceptions and compensating controls.
• Advise leadership on vulnerability risk and remediation priorities.
#qf
#qg
What they ask for
Required
- Expertise in analyzing Known Exploited Vulnerabilities (KEV) and federal cybersecurity directives
- Experience in penetration testing governance, including scope review, rules of engagement, and remediation tracking
- Ability to develop reports, dashboards, and executive briefings on cybersecurity compliance