MAS - Gritter - Francona, Inc. - 47QRAA19D0065

General Services Administration Federal Supply Service

Authorized Federal Supply Schedule Price List

Multiple Award Schedule Category H: Professional Services

Contract Number: 47QRAA19D0065

For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at http://www.gsa.gov/schedules-ordering Contract Period: 3/21/2024-3/20/2029 Modification PS-0012 dated 3/11/2024

Contractor: GRITTER - FRANCONA, INC.

15245 SHADY GROVE RD

Suite 430

Rockville, MD 20850-3242

Business Size: Small, Veteran Owned, Service-Disabled Business

Telephone: (616) 218-8349 Web Site: www.gritterfrancona.com E-mail: cjgritter@gritterfrancona.com Contract Administration: CORY GRITTER

For more information on ordering from Federal Supply Schedules go to the GSA Schedules page at GSA.gov

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is: http://www.GSAAdvantage.gov.

http://www.gsa.gov/schedules-ordering http://www.gritterfrancona.com/ mailto:cjgritter@gritterfrancona.com http://www.gsaadvantage.gov/

CUSTOMER INFORMATION:

1a. Table of Awarded Special Item Number(s) with appropriate cross-reference to page numbers:

SIN Recovery SIN Description 541910 541910RC Market Research and Analysis 541430 541430RC Graphic Design Services 541611 541611RC Management and Financial Consulting, Acquisition and Grants

Management Support, and Business Program and Project Management Services

54151S 54151SRC Information Technology Professional Services

611420 611420RC Information Technology Training

54151HACS 54151HACSRC Highly Adaptive Cybersecurity Services (HACS)

OLM OLMRC Order Level Materials

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract.

SINs 541910 and 541430 = Junior Designer - $84.17 per hour SIN 541611 = Analyst (Financial/Budget) - $66.55 per hour SIN 54151S = IT Staff - $77.28 per hour SIN 611420 = Executive Cyber Security Awareness - $2,583.48 SIN 54151HACS = Cybersecurity Level 1 - $86.55 per hour

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. Please see page

2. Maximum Order: $1,000,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery Area): Domestic delivery that includes 48 contiguous states, Washington, D.C.

only.

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted).

7. Quantity discounts: Yes, 0.5% for each task order exceeding $700,000.

8. Prompt payment terms: Net 30 days

9. Foreign items (list items by country of origin). Not Applicable (typical response)

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor or To Be Determined at the Task Order level

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor or To Be Determined at the Task Order level

10c. Overnight and 2-day delivery. Contact Contractor or To Be Determined at the Task Order level

10d. Urgent Requirements. Contact Contractor or To Be Determined at the Task Order level

11. F.O.B. point(s). Destination

12a. Ordering Address(es):

GRITTER - FRANCONA, INC.

15245 Shady Grove Road Suite 430 Rockville, MD 20850-3242 Phone: (616) 218-8349

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket

Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es):

GRITTER - FRANCONA, INC.

15245 Shady Grove Road Suite 430 Rockville, MD 20850-3242 Phone: (616) 218-8349

14. Warranty provision.: Contractor’s standard commercial warranty.

15. Export Packing Charges (if applicable): N/A

16. Terms and conditions of Government purchase card acceptance (any thresholds above the micropurchase level): Contact Contractor

17. Terms and conditions of installation (if applicable). Not Applicable

18. a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable (typical response)

23. Data Universal Numbering System (DUNS) number: 078793803

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

Professional Services Pricing:

The rates shown below include the Industrial Funding Fee (IFF) of 0.75%.

Labor Categories Pricing

# SIN Labor Category Site 3/21/2024

3/20/2025

3/21/2025

3/20/2026

3/21/2026

3/20/2027

3/21/2027

3/20/2028

3/21/2028

3/20/2029

541910/RC,

541430/RC,

541611/RC

Program Manager Both $178.48 $183.29 $188.24 $193.32 $198.54

541910/RC,

541430/RC,

541611/RC

Senior Analyst Both $119.31 $122.54 $125.84 $129.24 $132.73

541910/RC,

541430/RC,

541611/RC

Program Analyst Both $100.94 $103.66 $106.46 $109.33 $112.28

541910/RC,

541430/RC,

541611/RC

Business Systems Analyst, Jr. Both $86.22 $88.54 $90.93 $93.39 $95.91

541910/RC,

541430/RC,

541611/RC

Senior Architect Both $174.11 $178.81 $183.64 $188.59 $193.68

541910/RC,

541430/RC,

541611/RC

Subject Matter Expert Both $167.66 $172.18 $176.83 $181.60 $186.51 http://www.section508.gov/

541910/RC,

541430/RC,

541611/RC

Analyst (Financial/Budget) Both $78.69 $80.82 $83.00 $85.24 $87.54

541910/RC,

541430/RC,

541611/RC

Junior Designer Both $99.51 $102.20 $104.96 $107.79 $110.70

541910/RC,

541430/RC,

541611/RC

Research and Data Analyst Both $134.32 $137.94 $141.67 $145.50 $149.43

541910/RC,

541430/RC,

541611/RC

Copywriter/Editor Both $108.21 $111.13 $114.14 $117.22 $120.38

541910/RC,

541430/RC,

541611/RC

Web Specialist Both $121.90 $125.20 $128.58 $132.06 $135.63

541910/RC,

541430/RC,

541611/RC

Project Manager/Director Both $286.07 $293.79 $301.72 $309.87 $318.24

13 54151HEAL/RC Health IT Manager Both $161.63 $165.99 $170.48 $175.08 $179.81

14 54151HEAL/RC Health IT Specialist Both $93.02 $95.53 $98.11 $100.76 $103.48

15 54151HEAL/RC Health IT Specialist, Sr. Both $125.26 $128.64 $132.12 $135.69 $139.36

16 54151HEAL/RC Health IT Principal Subject Matter Expert Both $209.42 $215.07 $220.88 $226.84 $232.97

17 54151HEAL/RC Health IT Staff Both $64.12 $65.85 $67.63 $69.45 $71.32

18 54151HEAL/RC Health IT Business Process Architect Both $90.04 $92.46 $94.96 $97.52 $100.15

19 54151HEAL/RC Health IT Business Requirements Analyst Both $87.75 $90.12 $92.54 $95.04 $97.61

20 54151HEAL/RC Health IT Business Requirements Analyst, Jr. Both $83.03 $85.28 $87.59 $89.95 $92.38

# SIN Labor Category Site 3/21/2024

3/20/2025

21 54151S/RC Level 1 Both $77.80

22 54151S/RC Level 2 Both $105.73

23 54151S/RC Level 3 Both $112.22

24 54151S/RC Level 4 Both $140.74

25 54151S/RC Level 5 Both $183.25

26 54151S/RC Level 6 Both $293.20

27 54151S/RC Project Director Both $204.55

28 54151S/RC Program Manager Both $174.64

29 54151S/RC Manager Both $141.83

30 54151S/RC Sr. IT Specialist Both $127.36

31 54151S/RC IT Specialist Both $110.01

32 54151S/RC IT Staff Both $69.47

33 54151S/RC Sr. Security Manager Both $169.27

34 54151S/RC Principal Subject Matter Expert Both $183.78

35 54151S/RC Sr. Subject Matter Expert/Technical Expert Both $174.11

36 54151S/RC Sr. Architect Both $164.43

37 54151S/RC Sr. Integration Consultant Both $135.42

38 54151S/RC Integration Consultant Both $120.91

39 54151S/RC Sr. FileNet Consultant Both $135.42

40 54151S/RC FileNet Consultant Both $106.40

41 54151HACS/RC Cybersecurity Level 1 Both $77.80

42 54151HACS/RC Cybersecurity Level 2 Both $105.73

43 54151HACS/RC Cybersecurity Level 3 Both $112.22

44 54151HACS/RC Cybersecurity Level 4 Both $140.74

45 54151HACS/RC Cybersecurity Level 5 Both $183.25

46 54151HACS/RC Cybersecurity Level 6 Both $293.20

Service Contract Labor Standards: The Service Contract Labor Standards, formerly the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule and all services provided. While no specific labor categories have been identified as being subject to SCLS due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS eligible labor categories. If and/or when the contractor adds SCLS labor categories/employees to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS matrix identifying the GSA labor category titles, the occupational code, SCLS labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

Training Courses Pricing

SIN Course Title Description Price

(including

IFF)

611420 Cyber Security Investigations

This one-day course introduces students to the processes involved in investigating a cybersecurity incident, specifically focused on the information collection and analysis perspective. Students learn about digital forensics techniques and how the information can be used to help pain the picture of a cyber incident. This course provides the basic knowledge and skills to help students understand how an investigation is conducted and the processes included.

Length: 1 Day Type: Technical Training, no mandatory prerequisite for enrollment. Location: Remote or in-person

$7,181.86

611420

Vulnerability Assessment (VA) (Full Day Course

Development & Delivery)

This one-day course is designed to familiarize students with concepts and processes involved in performing a vulnerability assessment. Students will learn the preparatory considerations, how to conduct basic vulnerability scans, and reporting goals following an assessment. This course provides the overall picture a student needs to understand the managerial and operational concepts of a vulnerability assessment.

Length: 1 Day Type: Technical Training, no mandatory prerequisite for enrollment. Location: Remote or in-person

$25,585.39

611420 Executive

Cyber Security Awareness his course provides senior government officials training in cyber policy and operations that was not built into their developmental training due to its relative newness. The goal is to provide senior leaders with enough background on cyberspace to understand its strategic implications and uses, current government policies that govern actions in the cyber domain, and current threats that the United States face in the cyber environment.

Students will be familiarized with the individual risks that USG senior leaders face in utilizing information technology and cyber systems. It is understood that today’s senior cyber leadership may have limited cyber experience and background – this course serves to expand their cyber knowledge base and individual skills. This half-day course is presented live on customer site.

Length: 1/2 Day Type: Technical Training, no mandatory prerequisite for enrollment. Location: Remote or in-person

$2,583.48

611420 Program Security

Fundamentals

This four-day course provides students with a broad understanding of security policy, principles, rules, and procedures. Students will learn about the multiple facets of security related to Special Access Programs (SAP), focusing on Department of Defense (DoD), Intelligence Community (IC), and other service-related regulations and guidance.

Length: 4 Days Type: Technical Training, no mandatory prerequisite for enrollment. Location: Remote or in-person

$27,430.73

GF Labor Category Descriptions

SIN Position Title Description Experience and Education

541910/RC,

541430/RC,

541611/RC

Junior Designer

Designs marketing and promotional materials for print, web, and social media. Artwork may include toolkits, logos, templates, fact sheets, posters, social media graphics, complex graphics, illustrations, infographics, presentations, and reports. Strong understanding producing artwork for a variety of mediums. Collaborate with print production specialists as needed. Fluent in Adobe Creative Suite.

Possesses a solid understanding of creative trends, current design, and development technologies, including current graphic design, web, and multimedia trends.

0 years experience Bachelors Degree

541910/RC,

541430/RC,

541611/RC

Research and Data analyst

Performs qualitative and quantitative research activities and tasks including conducting in-depth interviews, developing and delivering surveys, reviewing and analyzing data metrics, developing focus group scripts, conducting and moderating focus groups, and conducting communications audits and environmental scans. Produces reports to capture current environment. Provides strategies and opportunities for improvement to achieve objectives.

Evaluates metrics to inform the client on current progress and trends. Solid understanding of analytic techniques and methodologies.

3 years experience

Bachelors Degree

541910/RC,

541430/RC,

541611/RC

Copywriter/Editor

Responsible for reviewing, editing, and assembling written content of print and web materials including fact sheets, reports, newsletters, scripts, talking points, proposals, presentations, web content, and other technical and nontechnical information. Superior copyediting and writing skills and expert in English grammar and writing best practices.

Minimum 2 years experience

Bachelors Degree

541430/RC,

541611/RC

Web Specialist

Creates, updates, and maintains code to adhere to client requirements. Provides web design strategy, development, and web maintenance to organization’s web guidelines.

Ability to program in HTML and CSS. Solid understanding of SharePoint design and development. Experience working in content management systems. Coordinates with stakeholders to meet web performance metrics. Provide ongoing monitoring and recommendations for changes to improve user experience and site performance. Solid understanding of Search Engine Optimization and analytics.

Minimum of 3 years experience

BA/BS degree in an applicable field of study

541910/RC,

541430/RC,

541611/RC

Project Manager/Director

Manages and provides daily contract oversight on all operations including managing spend plans, deliverables schedule, task delegation, and quality control. Tracks status of project team delivery and any contract support activities. Liaison between COR and Project Management Office to manage contract performance standards. Develops and implements high-level strategic communications; manages, motivates, and leads staff;

and builds and manages project teams. Ensures the contract team performs work on schedule and budget.

Minimum 8 years of relevant experience BA/BS degree in an applicable field of study

541430/RC,

541611/RC

Program Manager

Performs day-to-day management of contract support operations. Demonstrates skills in the scope of work encompassed by Project. Provides technical guidance to the project team in performance of the work, and reviews the quality of all work products. Organizes, directs, and coordinates the planning and production of all contract support activities.

Responsible for staffing, project planning, project financials, and staff direction and oversight. The Project Manager maintains and manages the client interface at the COTR levels of the client organization.

Bachelors and 8 Years Experience

541910/RC,

541430/RC,

541611/RC

Senior Analyst

Performs a wide variety of complex technical activities in support of contract transition service activities. Evaluates data, rules and regulations. Develops and analyzes operational concepts, plans, and instructions. Identifies alternative courses of action and makes recommendations as required. Serves as advisor to analysts, technical directors, and project managers. Experience in research regarding service matters and combined doctrine, operations, liaison and coordination with other government agencies, industry, and academia. Assists in the conduct of conferences and working meetings and prepares materials for such events. Guides and leads discussions. Assist in the development of functional programs and materials. Assists in the tracking and evaluation of on-going operations.

Reviews forms and reports, and confers with management and users about format, distribution, and purpose, and to identify problems and improvements. Collects, maintains, and processes data. Prepares reports, summaries, and legislative materials for use by managers. Provides advice and insight about probable effects and alternative solutions to problems. Identifies sources of relevant information and data. Plans and establishes record and data storage and retrieval systems. Evaluates data and information to monitor status of ongoing operations. Designs experiments to support evaluation of management and technical activities.

Bachelors and 4 Years Experience

541910/RC,

541430/RC,

541611/RC

Program Analyst

Prepares and conducts business analyses and studies, needs assessments, requirements analysis/definition and cost/benefit analyses in an effort to align business systems, solutions and initiatives. Prepares forecasts and analyzes trends, reporting regulations and business conditions.

Develops and analyzes metrics, performance measurements, requirements, reports and recommendations related to management, organizational structure, policy/procedures and business systems. Identifies potential business risks. Areas of focus include but are not limited to business performance, business and economic case analysis, internal control and enterprise risk assessment

Bachelors and 3 – 5 Years

541910/RC,

541430/RC,

541611/RC

Business Systems Analyst, Jr.

Prepares and conducts business analyses and studies, needs assessments, requirements analysis/definition and cost/benefit analyses in an effort to align business systems, solutions and initiatives. Prepares forecasts and analyzes trends, reporting regulations and business conditions.

Develops and analyzes metrics, performance measurements, requirements, reports and recommendations related to management, organizational structure, policy/procedures and business systems. Identifies potential business risks. Areas of focus include but are not limited to business performance, business and economic case analysis

Bachelors and 0 – 3 Years Experience

541430/RC,

541611/RC

Senior Architect

Develops and maintains business capabilities of the enterprise in line with corporate strategy and contributes to creation of business strategy and plans. This also includes design of capability models and related architectural solutions of business tasks, mapping capability functionality to the internal and external resources, developing business transformation plans. Develops and maintains architectural governance and controls over implementation. For each step of the business transformation plan the business architect contributes in development of a blueprint of the enterprise in order to promote a common understanding of the organization and alignment of strategic objectives with tactical demands

Bachelors and 10 Years Experience

541910/RC,

541430/RC,

541611/RC

Subject Matter Expert

Provide a definitive source of knowledge, technique, or expertise in a specific subject area, such as business management, information technology, software development, process engineering. Function as the organizational ambassador for their knowledge area, and applies their expertise to support an organization’s vision and strategic direction. Lead effort in establishing a functional base line for as-is-state and defining the to-be- state with transition roadmap that includes the key components around business processes, policy framework, process re-design, change management and working closely with other technology team members in determining technology and product configurations. Lead requirement analysis sessions to gather key business objectives, identify current business process challenges, identify and document gaps in business processes. Identify Business Process re- engineering opportunities for existing and future modules and processes. Identify impacts that changes to system configurations will have on integrated systems and existing internal and external interfaces. Lead in design, setup and configuration of the application, reports and interfaces.

Review, revise, recommend, and document new business processes, procedures, and set ups. Design and perform organizational change management activities, such as documentation, training, sessions, lab and end-user support etc. Provide recommendations for risk mitigation. Prepare and issue requested project status reports covering all assigned pending and current project activities. Provide leadership in the development of functional skills in others through active knowledge sharing. Work with team to develop audit standards for transactions and data. Provide on-going formal internal training as needed. Assist in managing requests from stakeholders following the change management process. Develop change request business cases (i.e. define the problem, pros, cons, suggestions, cost/benefit analysis; recommendations). Lead in performing configuration changes, testing, training and business process documentation as needed.

8 years Experience

541910/RC,

541430/RC,

541611/RC

Financial/Budget Analyst

Support the planning and execution of branch, division, and directorate operating resource budgets for a federal organization. Provide strategic resource management analysis, budget or programming services, including planning, programming, budgeting, and executing and tracking data, financial management support, such as maintaining cognizance of the status of approved, deferred, and released funds, appropriate tracking documentation, and financial information for the preparation and execution of financial documents. Maintain an accurate audit trail to separately track, record, and report the status of each funding document to ensure proper use of all funds, including active, expired, and cancelled. Coordinate with branch, division, and directorate leadership, as required in performance of budget execution or justification. Provide draft information for data calls to higher organizations on an as needed basis and decision support to management to contribute in development of program and budget submissions. Possesses experience in a federal government organization and with facilities management.

0 to 3 Years Experience

GF Labor Category Descriptions (continued)

54151HEAL/RC Health IT Manager

Provides management of diverse health IT projects, large and small. Manages a portfolio of projects. Provides guidance in full systems development life cycle, enterprise-wide network engineering, strategic information planning, business process reengineering, and management practices. Identifies and mitigates risks to the program. Manages cost, schedule, and performance. Serves as the primary contact to the client. Responsible for ensuring communications with the client; preparing project plans, coordinating activities;

providing regular project reports; ensuring sufficient project resources and proper training for personnel; handling contractual matters; monitoring project performance;

and controlling project scope and budget. Ability to brief Health IT executives, oversee and implement the guidance and policies Preferred working knowledge of electronic health records (EHR), and health information exchanges, emerging Health IT research.

6 years of experience;

Bachelors

54151HEAL/RC Health IT Specialist Handle the technical aspects of managing patient health information. Build, implement, or support electronic health records (EHRs) and other systems that store patient-related data.

2 years of experience;

Bachelors

54151HEAL/RC Health IT Specialist, Sr.

Responsible for advanced level problem solving, organizing, training, and communicating within the department and organization. Responsible for evaluating the day-to-day activities including Handle the technical aspects of managing patient health information. Build, implement, or support electronic health records (EHRs) and other systems that store patient-related data.

3 years of experience;

Bachelors

54151HEAL/RC Health IT Principal Subject Matter Expert

Provides technical, managerial, and administrative direction for problem definition, analysis, requirements development, and implementation for complex to extremely complex systems in the subject matter area. This can include health analytics, innovative Health IT solutions, health informatics, and other health IT services. Makes recommendations and advises on organization-wide system improvements, optimization or maintenance efforts in the following specialties: information systems architecture, COTS implementation, networking, telecommunications, automation, communications protocols, risk management/electronic analysis, software, lifecycle management, software development methodologies, modeling and simulation.

12 years of experience;

Bachelors

54151HEAL/RC Health IT Staff Perform specific procedures under the guidance of a Health IT Specialist. 1 year of experience;

Bachelors

54151HEAL/RC Health IT Business Process Architect

Experience within the healthcare sector with Business Process Modeling, Business Architecture and Automation, Innovative Health IT solutions. Have a strong understanding of healthcare business process design best practices, principles, and patterns while incorporating health related information technology services. Translate business needs into business requirements, solutions, and roadmaps. To includes providing review and support for application design, and supporting major enterprise initiatives like cloud migration. Strong knowledge of various business process modeling techniques and best practices, and knowledge of tools to create and visualize architectures.

2 years of experience;

Bachelors

54151HEAL/RC Health IT Business Requirements Analyst

Provide expertise in business process and system analysis, design, improvement, and implementation efforts and in translating business process needs into technical requirements for Health IT. Ability to assist in research and analysis of existing systems to define problems, data availability, report requirements, and provide innovation solutions for health IT systems. Provides effective use of data provided by cost estimators to create overall cost versus benefit assessment while considering functional benefits, technical performance, risks, and schedule concerns. Ability to research and analyze requirements for health IT systems from a project's inception to its conclusion.

Ability to research required specifications for simple to moderately complex systems to recommend innovative solutions. Preferred working knowledge of electronic health records (EHR), and health information exchanges, emerging Health IT research.

2 years of experience;

Bachelors

54151HEAL/RC

Health IT Business

Requirements Analyst, Jr.

Provide business process and system analysis, design, improvement, and implementation efforts and in translating business process needs into technical requirements for Health IT. Analyze requirements and reconcile conflicting interest, and determine how to translate the designer's vision into a plan that can be implemented by developers.

1 Year of experience;

Bachelors

GF Labor Category Descriptions (continued)

54151S/RC Level 1

The Level 1Tasks include:

Ensures quality deliverables

• Provide timely deliverables to clients

• Completes initial training as defined

• Completes, prioritizes, resolves and/or escalates routine problems and root cause analysis

• Documents and communicates project and service-related problems using appropriate tools and processes with an appropriate level of detail

• Completes most work with guidance and direction

• Performs and may lead tactical work (e.g., daily service work and/or project tasks)

• Develops a working knowledge of applicable security software, tools, processes, procedures and environment

• Review and understand governing regulations, policies, frameworks, executive orders and other materials relevant to the cybersecurity, information assurance, and information technology fields

• Understands the fundamentals of the customer’s business

• Demonstrates ability to interact with customers For Compliance, work with senior member to develop skillset in the following:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For technical, work with Senior member to develop skillset in the following:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments

• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing

• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

• Identify vulnerabilities as the

Associates or Bachelor’s degree in IT or

Information Security preferred. 0 Years

Experience

54151S/RC Level 2

The Level 2 Tasks include:

• Start to Lead smaller client engagements with customers

• Participate product methodology development

• Ensures quality deliverables

• Provide project management to smaller engagements

• Provide timely deliverables to clients

• Independently provides security support and incident resolution to customers

• Leads tactical work and contributes to strategic work (e.g., creating something new or modifying something currently in existence to meet business or customer needs)

• Assists with developing or modifying operating policies and procedures

• Establishes and maintains business relationships and strategic partnering skills with internal and external contacts• Applies understanding of the evolving governance, compliance and regulatory landscape as it pertains to specific security capabilities or technologies to complete assignments

• Understands the fundamentals of the customer’s business

• Demonstrates ability to interact with customers For Compliance, the obtain the ability to:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.

Associates or Bachelor’s degree in IT or

Information Security preferred. 3Years

Experience

• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For technical, the obtain ability to achieve:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments

• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing

• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

• Identify vulnerabilities as they relate to regulations such as ISO, PCI, HITRUST, and/or

HIPAA

54151S/RC Level 3

The Level 3 Tasks include:

• Lead client engagements with customers

• Understands the fundamentals of the customer’s business

• Demonstrates ability to interact with customers

• Participate product methodology development

• Ensures quality deliverables

• Mentors teams

• Provide project management to engagements

• Provide timely deliverables to clients

• Demonstrates sound judgement in making decisions with respect to matters of moderate to high complexity and importance

• Assists in budgeting and project planning

• Participates in and/or leads technology/capability reviews, evaluations, demonstrations, proofs of concept and implementations

• Applies broad-based knowledge of security technologies with an in-depth /specialized knowledge of at least one security tool to perform daily tasks.

• Conducts architecture reviews to ensure security issues are appropriately addressed• Coordinates security related delivery activities and manages routine customer engagements

• Keeps abreast cybersecurity industry trends and best practices to modify processes to meet changing needs and influence the direction of solutions

• Mentors and trains Security Analysts and others

• May lead some strategic work and/or contributes to strategic work (e.g., cross departmental or enterprise initiatives) For Compliance, the ability to:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.

• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For technical, the ability to achieve:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

Associates or Bachelor’s degree in IT or

Information Security preferred. 5 Years

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments

• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing

• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

54151S/RC Level 4

The Level 4 Tasks include:

• Work with Sales and other verticals to promote company growth.

• Work with HR on recruiting efforts

• Lead client engagements with customers

• Develops strong customer relations with senior-level customers and wins customer confidence

• Build relationships with customers to drive long-term opportunities

• Leads product methodology development

• Ensures quality deliverables

• Mentors teams

• Provide project management to engagements

• Provide timely deliverables to clients

• Provide sales support and materials as needed• Lead team and promote advanced skills

• Applies breadth and depth of knowledge and is sought out as a subject matter expert in area of expertise, providing consulting and coordination of work on complex efforts

• Conducts research, analyzes and synthesizes information anticipating business needs and its application to company processes and potential solutions

• Leads and/or contributes to strategic work (highly complex and crosses multiple organizational boundaries) and influences others

• Functions with the highest level of autonomy and assumes a lead/coordination role in the completion of work responsibilities

• Drives, coordinates, and delegates work of other analysts

• Manages complex customer engagements

• Provides leadership to others within sphere of influence including business partners and other areas within the company For Compliance, the ability to:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.

• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For technical, the ability to achieve:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments

• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

• Identify vulnerabilities as they relate to regulations such as ISO, PCI, HITRUST, and/or

HIPAA

Associates or Bachelor’s degree in IT or

Information Security preferred. 7 Years

54151S/RC Level 5

The Level 5 Tasks include:

• Work with Sales and other verticals to promote company growth.

• Work with HR on recruiting efforts

• Lead client engagements with customers

• Develops strong customer relations with senior-level customers and wins customer confidence

• Build relationships with customers to drive long-term opportunities

• Leads product methodology development

• Ensures quality deliverables

• Mentors teams

• Provide project management to engagements

• Provide timely deliverables to clients• Provide sales support and materials as needed

• Lead team and promote advanced skills

• Develop new product offerings

• Provides direction to employees and associates to meet business objectives

• Manages to budget and contributes to the planning processes

• Mentors others, and is a thought leader among manager peers

• Solves complex problems that may involve complicated variables and significant financial impact

• Has significant latitude for independent decisions and manages all aspects of assigned responsibilities with minimal to no supervision needed

• May coordinate complex projects requiring extensive knowledge in area of responsibility

• Creates and maintains a working environment that fosters superior customer service, teamwork, job enrichment, and productivity

• Suggests methods to update, simplify, and enhance processes, procedures, and technologies

• Communicates company information and encourages feedback form reporting employees For Compliance, the ability to:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.

• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For technical, the ability to achieve:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing

• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

• Identify vulnerabilities as they relate to regulations such as ISO, PCI, HITRUST, and/or

HIPAA

Bachelor’s degree in functional/technical area.

Master’s degree in functional/technical area preferred. 12 Years

54151S/RC Level 6

The Level 6 Tasks include:

• Work with HR, Finance, Marketing, Sales and other verticals to promote company stability and growth.

• Work with HR on recruiting efforts

• Manages employee workloads and utilization to meet business objectives and assigned targets

• Lead client engagements with customers

• Leads product methodology development

• Ensures quality deliverables

• Mentors teams

• Provide project management to engagements

15 Years Experience Bachelor’s degree in functional/technical area.

Master’s degree in functional/technical area preferred.

• Provide timely deliverables to clients• Develops strong customer relations with senior-level customers and wins customer confidence For Compliance Consulting/Services, demonstrates the following expertise:

• Review, develop and implement Information Security related policies.

• Perform industry and regulatory program and risk assessments.

• Security Awareness development and training

• Social Engineering & Phishing exercises

• Incident Response plan development & testing

• Leading Incident Response teams

• Vendor Security assessments

• Building information security frameworks

• Implementing Information security frameworks For Technical Consulting/Services, demonstrates the following expertise:

• Public Information Data Mining

• Network Reconnaissance Techniques

• Vulnerability Identification

• System and Application Exploitation

• Software Security Assessments (thick client)

• Wireless Vulnerability Testing

• Vulnerability Assessments

• Database security reviews

• OWASP web application assessments

• Experience with Linux and scripting languages (bash, perl, PHP, etc.)

• Internal & external Penetration testing

• Wireless test

• War-dialing,

• Social-engineering

• Internal, External and application vulnerability assessments

• Perform White-Box and Black-Box Web Application Security Assessments

• Review application source code and database SQL and stored procedure code for potential vulnerabilities and exploits.

• Product and embedded device assessments.

• Mobile App Assessments

• Identify vulnerabilities as they relate to regulations such as ISO, PCI, HITRUST, and/or HIPAA

54151S/RC Project Director

Provides primary interface with client management personnel regarding strategic issues.

Directs the completion of projects within estimated time frames and budget constraints.

Coordinates all parties to tasks, reviews work products for completeness and adherence to customer standards. Delivers presentations and leads strategic level client meetings.

10 Years Experience.

54151S/RC Program Manager

Increasing responsibility in design and management of IT projects. Directs the completion of projects within estimated time frames and budget constraints. Coordinates project specific parties and reviews work products for completeness and adherence to customer requirements.

8 Years Experience.

Bachelors

54151S/RC Manager

Increasing responsibility in IT system design and management. Interfaces with the client on a day to day basis. Directs the completion of project specific tasks within estimated time frames and budget constraints. Manages the day-to-day activities and reviews work products for completeness and adherence to customer requirements. Delivers presentations and leads client meetings.

6 Years Experience.

54151S/RC Sr. IT Specialist Interfaces with the client on a day-today basis. Supports the completion of project specific tasks within estimated time frames and budget constraints.

3 Years Experience.

Bachelors

54151S/RC IT Specialist Interfaces with the client on a day-to-day basis. Supports the completion of project specific tasks within estimated time frames and budget constraints. Supports presentations and client meetings.

2 Years Experience.

Bachelors

54151S/RC IT Staff Perform specific procedures under the guidance of an IT Specialist. 1 Years Experience.

54151S/RC Sr. Security Manager

Apply broad management skills and specialized functional and technical expertise to lead complex, large projects in delivering client solutions or to manage the operations of multiple projects. Provide subject matter expertise in industry, process or technology areas. Qualified to perform such tasks as: Plan and manage the work of information systems project teams; design and implement new organization structures; design and implement information and security standards; conceptual design and development of training curricula; work with client executives to facilitate organizational change programs and realize business goals.

15 Years Experience.

Bachelors

54151S/RC Principal Subject Matter Expert

Provides technical, managerial, and administrative direction for problem definition, analysis, requirements development, and implementation for complex to extremely complex systems in the subject matter area. Makes recommendations and advises on organization-wide system improvements, optimization or maintenance efforts in the following specialties: information systems architecture, COTS implementation, networking, telecommunications, automation, communications protocols, risk management/electronic analysis, software, lifecycle management, software development methodologies, modeling and simulation.

12 Years Experience.

Bachelors

54151S/RC Sr. Subject Matter Expert/Technical Expert

Defines problems and analyzes and develops solutions and requirements in the subject matter area for moderately complex to complex systems. Coordinates and manages the preparation of analysis, evaluations, and recommendations for proper implementation of programs and systems specifications in the following specialties: information systems architecture, COTS implementation, networking, telecommunications, automation, communications protocols, risk management/electronic analysis, software, lifecycle management, software development methodologies, and modeling and simulation.

10 Years Experience.

54151S/RC Sr. Architect

Acts as a lead in defining and executing integration engineering activities within a project. These activities may consist of concept exploration and assessment, systems integration, systems of systems integration, performance management, technology assessment, testing and validation, and development and staffing of a systems integration plan. Principal Duties and Responsibilities: 1. Performs concept exploration and assessment, systems integration, systems of systems integration, performance management, technology assessment, testing and validation. 2. Development and staffing of a systems integration management plan. 3. Supports other Engineers and Program Managers, as required. 4. Analyzes and develops technical documentation detailing the integration and system performance. 5. Coordinates the activities of system integration engineers assigned to specific systems integration projects

12 Years Experience.

Bachelors

54151S/RC Sr. Integration Consultant

Contributes overall strategic vision and integrates a broad range of solutions in support of client requirements for IT projects. Formulates and defines system scope and objectives, develops or modifies processes to solve complex problems for computer systems and business and electronic interfaces to achieve desired results through the use of innovative technologies. Develops and applies advanced engineering and design methods, theories, and research techniques in the investigation and solution of complex and advanced system requirements, hardware/software interfaces and applications, and solutions.

Responsible for design, development, engineering, integration, and architecture. Senior staff manages, plans, and conducts major phases of significant projects. Design and Development disciplines include but are not limited to systems and network architecture design and analysis, systems design engineering and integration, network engineering, enterprise resource planning (ERP) integration, systems development, mission engineering, technology planning, applications development and programming, certification and authentication, data conversion, data warehousing, database design and administration, enterprise architecture integration, information assurance, biometrics, identity protection and access management, IV&V, continuity operational planning and disaster recovery, PKI development, quality assurance system performance, test and validation.

8 Years Experience.

Bachelors

54151S/RC Integration Consultant

Formulates and defines system scope and objectives, develops or modifies processes to solve complex problems for computer systems and business and electronic interfaces to achieve desired results through the use of innovative technologies.