Cybersecurity Specialist - VM/CDM Operations

QBE Federal; Virginia (IL); Hybrid; USD 100,000 - 115,000; Full time

Job summary

QBE, LLC seeks a Cybersecurity Specialist - VM/CDM Operations to support vulnerability management and Continuous Diagnostics and Mitigation for NIH/OD-OIT. The role is primarily remote with some TDY, focusing on vulnerability scanning, remediation prioritization, and metrics reporting.

Responsibilities include coordinating with owners and engineers to remediate findings, validating remediations, and maintaining CDM dashboards.

Qualifications

• Minimum 7 years of relevant experience in vulnerability management and CDM.
• Experience performing vulnerability scanning, analysis, prioritization, and remediation tracking.
• Familiarity with federal vulnerability management concepts and risk prioritization methodologies.

Responsibilities

• Perform enterprise vulnerability management and CDM operational activities.
• Review scan results and identify weaknesses requiring remediation.
• Coordinate remediation with system owners, administrators, and engineering teams.
• Track vulnerabilities from identification through remediation or risk acceptance.
• Develop vulnerability management metrics and recurring status reports.
• Support validation and rescanning of remediated vulnerabilities.

Skills

Vulnerability scanning

Risk analysis

Remediation tracking

Cross-functional collaboration

Documentation

Education

Associate degree in cybersecurity or related field

CompTIA Security+

CIPP certification

Tools

Vulnerability management tools

CDM platforms

Job description

About QBE, LLC

QBE, LLC is a small business dedicated to delivering innovative technology, cybersecurity, and mission-support solutions to federal government customers. Our experienced professionals work closely with our customers to solve complex challenges, protect critical information, and support essential government missions.

At QBE, we turn the possible into the proven.

Overview

QBE, LLC is seeking a Cybersecurity Specialist - VM/CDM Operations to support vulnerability management and Continuous Diagnostics and Mitigation activities for NIH/OD-OIT.

This position is primarily remote but will require some TDY.

Responsibilities

• Perform enterprise vulnerability management and CDM operational activities.
• Review vulnerability scan results and identify security weaknesses requiring remediation.
• Analyze vulnerabilities based on severity, exploitability, system criticality, and organizational risk.
• Coordinate remediation activities with system owners, administrators, and engineering teams.
• Track vulnerabilities from identification through remediation or approved risk acceptance.
• Support CDM dashboards, reporting, data validation, and operational processes.
• Investigate discrepancies between scanner results, asset inventories, and remediation records.
• Assist with vulnerability prioritization and risk-based remediation planning.
• Develop vulnerability management metrics and recurring status reports.
• Support validation and rescanning of remediated vulnerabilities.

Requirements

Minimum Qualifications

• Associate degree in cybersecurity, information technology, computer science, information systems, business, communications, or a related field, or an additional two or more years of relevant experience in place of the degree requirement.
• At least 7 years of relevant experience aligned to the responsibilities of this position.
• Experience performing vulnerability scanning, analysis, prioritization, and remediation tracking.
• Knowledge of federal vulnerability management and CDM concepts.
• Understanding of common vulnerability scoring and risk prioritization methodologies.
• Experience collaborating with technical teams to remediate security findings.
• CompTIA Security+ certification.
• Certified Information Privacy Professional (CIPP) certification.
• Ability to obtain and maintain the required federal background investigation, Public Trust determination, or security clearance associated with the position.

Preferred Qualifications

• Experience supporting DHS CDM implementations.
• Experience supporting HHS, NIH, or other federal civilian environments.
• Familiarity with enterprise vulnerability scanning and reporting platforms.

Physical Requirements

• Ability to remain in a stationary position for extended periods while working at a computer.
• Ability to communicate effectively through virtual and in-person meetings.
• Ability to perform duties in an office, remote, or hybrid environment based on program requirements.
• Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the position.

Equal Opportunity Employer

QBE, LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable federal, state, or local law.

The projected compensation range for this position is $100,000.00 - $115,000.00. There are differentiating factors that can impact a final salary/hourly rate, including, but not limited to, Contract Wage Determination, relevant work experience, skills and competencies that align to the specified role, geographic location (for remote opportunities), education and certifications as well as Federal Government Contract Labor categories. In addition, QBE invests in its employees beyond just compensation. QBE's benefits offerings include, dependent upon position, Health Insurance, Life Insurance, Paid Time Off, Holiday Pay, short-term and long-term Disability, Retirement and Savings, Learning and Development opportunities, wellness programs as well as other optional benefit elections.