Note: The job is a remote job and is open to candidates in USA. QBE, LLC is a technology, cybersecurity, and mission-support solutions provider for federal government customers. The company is seeking a Cybersecurity Specialist - VM/CDM Operations to support enterprise vulnerability management and Continuous Diagnostics and Mitigation activities for NIH/OD-OIT, including vulnerability analysis, remediation coordination, reporting, and risk-based prioritization.
Responsibilities
- Perform enterprise vulnerability management and CDM operational activities
- Review vulnerability scan results and identify security weaknesses requiring remediation
- Analyze vulnerabilities based on severity, exploitability, system criticality, and organizational risk
- Coordinate remediation activities with system owners, administrators, and engineering teams
- Track vulnerabilities from identification through remediation or approved risk acceptance
- Support CDM dashboards, reporting, data validation, and operational processes
- Investigate discrepancies between scanner results, asset inventories, and remediation records
- Assist with vulnerability prioritization and risk-based remediation planning
- Develop vulnerability management metrics and recurring status reports
- Support validation and rescanning of remediated vulnerabilities
Skills
- Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement
- At least 7 years of relevant experience aligned to the responsibilities of this position
- Experience performing vulnerability scanning, analysis, prioritization, and remediation tracking
- Knowledge of federal vulnerability management and CDM concepts
- Understanding of common vulnerability scoring and risk prioritization methodologies
- Experience collaborating with technical teams to remediate security findings
- CompTIA Security+ certification
- Certified Information Privacy Professional (CIPP) certification
- Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position
- Ability to remain in a stationary position for extended periods while working at a computer
- Ability to communicate effectively through virtual and in-person meetings
- Ability to perform duties in an office, remote, or hybrid environment based on program requirements
- Experience supporting DHS CDM implementations
- Experience supporting HHS, NIH, or other federal civilian environments
- Familiarity with enterprise vulnerability scanning and reporting platforms
Benefits
- Health Insurance, dependent upon position
- Life Insurance, dependent upon position
- Paid Time Off, dependent upon position
- Holiday Pay, dependent upon position
- Short-term and long-term Disability, dependent upon position
- Retirement and Savings, dependent upon position
- Learning and Development opportunities, dependent upon position
- Wellness programs, dependent upon position
- Other optional benefit elections, dependent upon position
Company Overview