Enterprise Vulnerability and Threat Management

The Enterprise Vulnerability and Threat Management subcontract supports the FDA Office of Information Security by providing vulnerability scanning, assessment, and remediation orchestration. The scope of work involves integrating vulnerability management tools and implementing automated remediation workflows driven by threat intelligence platforms. Key deliverables include comprehensive vulnerability assessment reports and detailed remediation logs. This opportunity is a Small Business Set Aside under NAICS code 541519, managed by the Department of Health and Human Services. Performance is based in Rockville, Maryland. Due to the nature of the work, personnel must possess a Public Trust, Moderate Level Tier 2S background investigation. The response deadline for this solicitation is September 3, 2026.