MAS - Sixgen Inc. - 47QTCA18D0019

General Services Administration Authorized Federal Supply Schedule Pricelist

185 Admiral Cochrane Drive, Suite 210 Annapolis, MD 21401♦ Phone: (410) 874-6446 www.SIXGEN.io

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

Online access to contract ordering information, terms and conditions, pricing, and the option to create an electronic delivery order are available through GSA Advantage!®. The website for

GSA Advantage!® is: https://www.GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Multiple Award Schedule

Contract Number: 47QTCA18D0019

Contract period: October 25, 2022, through October 24, 2027

Contractor's Name: SixGen, Inc.

Address: 185 Admiral Cochrane Drive, Suite 210, Annapolis, MD 21401

Website: www.SIXGEN.io

Business size: Other Than Small

For more information on ordering from Federal Supply Schedules, go to the GSA Schedules page at GSA.gov/schedules

Price list current as of Modification #PO-51 effective 06/03/25 http://www.sixgen.io/

1a. Awarded Special Item Numbers:

SIN Description 54151HACS Highly Adaptive Cybersecurity Services (HACS) 54151S Information Technology Professional Services OLM Order-Level Materials (OLM) 511210 Software Licenses 611420 Information Technology Training

1b. Lowest Priced Labor Category:

Labor Category Rate User Interface Engineer $94.63 Technical Writer $94.63 Information Assurance Specialist $94.63 Software Engineer I $94.63

2. Maximum order: $500,000

3. Minimum order: $100

4. Geographic coverage: Worldwide

5. Point(s) of production: 185 Admiral Cochrane Drive, Suite 210 Annapolis, MD 21401 – and client site

6. All prices listed are net prices inclusive of the 0.75% IFF.

7. Quantity Discount: None for Services, for product, 10% for over QTY 100

8. Prompt payment terms: None. Payment is net 30 days. Information for Ordering Offices:

Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign Items: None (Products are in compliance with TAA)

10a. Time of Delivery: Specified in each task order

10b. Expedited Delivery: To be specified for each task order

10c. Overnight and 2-Day Delivery: Not applicable

10d. Urgent Requirements: Not Applicable

11. F.O.B Points: Destination

12a. Ordering address(es):

185 Admiral Cochrane Drive Suite 210 Annapolis, MD 21401

12b. Ordering Procedures: For supplies and services, the ordering procedures, information on

Blanket Purchase Agreements (BPAs) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment Address:

185 Admiral Cochrane Drive Suite 210 Annapolis, MD 21401

14. Warranty Provision: Not applicable

15. Export Packing Charges: Not applicable

16. Terms and Conditions of Rental, Maintenance, and Repair: Not applicable

17. Terms and Conditions of Installation: Not applicable

18a. Terms and Conditions of Repair Parts Indicating Date of Parts Price List and Any Discounts from List Prices: Not applicable

18b. Terms and Conditions for Any Other Services: Not applicable

19. List of Service and Distribution Points: Not applicable

20. List of Participating Dealers: Not applicable

21. Preventive Maintenance: Not applicable

22a. Special Attributes: Not applicable

22b. Section 508: If applicable, Section 508 compliance information on Electronic and Information Technology (EIT) supplies and services will be addressed on a task order basis. The EIT standards can be found at www.Section508.gov. N/A

23. Unique Entity Identifier (UEI) Number: W2PKJHAU9JR9 http://www.section508.gov/

24. Notification regarding registration in The System for Award Management: SixGen, Inc.

is registered in SAM.

Contacts:

a) Chief Growth Officer: Amanda Arnold, (703) 225-8207, amanda@sixgen.io

b) Controller/Contracts Manager: Jessica Goodman, (410) 507-0554, jessica@sixgen.io

Description of Services:

SixGen, Inc. provides an offensive-minded cadre of cyber planners, operators, analysts, and developers who are subject matter experts with proven mission success against the highest priority, time sensitive targets in the IC and DoD. Ongoing support to contract customers includes red teaming and opposition force exercise support with an emphasis on threat emulation, wargaming and exercises, modeling and simulation, operational tests and evaluation, penetration testing and security consulting services.

Our Government customers using GSA receive 6% discounted pricing from our commercial rates.

mailto:amanda@sixgen.io mailto:jessica@sixgen.io

Technical Lead

Minimum Education: BA or exp equivalent Minimum Experience: 10 years Responsibilities: Experience serving as the manager of complex technology implementations, with an eyetoward constant reengineering and refactoring to ensure the simplest and most elegant system possible to accomplish the desired need. Understands how to maximally leverage the open-source community to deploy systems on infrastructure-as-a-service (IaaS) providers. Comfortable with transparently sharing knowledgeacross a multi-disciplinary team and working within agile methodologies. Architect the overall system using prototyping and proof of concepts, which may include: Modern programming languages (e.g., Ruby,Python, Node.js) and web frameworks (e.g., Django, Rails). Modern front-end web programming techniques (e.g., HTML5, CSS3, RESTful APIs) and frameworks (e.g., Twitter Bootstrap, jQuery).Relational databases (e.g., PostgreSQL), and “NoSQL” databases (e.g., Cassandra, MongoDB. Automated configuration (e.g., Chef, Puppet, Ansible, Salt), continuous integration/deployment, and continuous monitoring solutions. Use version control systems, specifically Git and GitHub. Maintain strategic alignment of technical design and architecture to meet business growth and direction and stay ontop of emerging technologies. Develop product roadmaps, backlogs, and measurable success criteria, and writing

1c. GSA Labor Category Descriptions – applies to all awarded SINs.

Product Manager

Minimum Experience: 10 years Responsibilities: Lead one or more multi-disciplinary agile delivery teams to deliver excellent new products and/or iterations to existing products to meet user needs. Gather user needs based on a communicable understanding of diverse audience groups. Define and get stakeholder buy-in for product definition and delivery approach. Create effective, prioritized product descriptions and delivery plans to meet user needs in a cost-effective way. Interpret user research in order to make product decisions. Keep abreast of changes to user habits, preferences, and behaviors across various digital platforms and their implications for successful delivery of digital services. Ensure iterative delivery of digital services through effective analysis of qualitative and quantitative user data. Communicate credibly with a wide range of digital delivery disciplines, expertise and talent.

Clearly communicates and works with stakeholders at every level.

Project Manager

Minimum Education: AA or 2-year technical training or exp equivalent Minimum Experience: 8 years Responsibilities: Experience managing a team engaged in the delivery, ongoing success, and continuous improvement of one or more digital products and/or platforms. Comfortable with transparently sharing knowledge across a multi-disciplinary team and working within agile methodologies. Coordinate internal team members as well as third parties/vendors for successful execution of projects. Ensure that all projects are delivered on-time, within scope, and within budget. Assist in the definition of project scope and objectives, involving all relevant stakeholders and ensuring technical feasibility. Ensure resource availability and allocation. Manage changes to the project scope, project schedule, and project costs using appropriate verification techniques.

Measure project performance using appropriate tools and techniques. Perform risk management to minimize project risks. Track project performance, specifically to analyze thesuccessful completion of short and long-term goals. Meet budgetary objectives and make adjustments to project constraints based on financial analysis. Communicate credibly with a wide range of digital delivery disciplines, expertise and talent. Communicates with stakeholders at every level.

User Experience Researcher/Designer

Minimum Education: AA or 2-year technical training or exp equivalent Minimum Experience: 8 years Responsibilities: Experience driving research activities, deriving insights, generating concepts, communicating those concepts visually and interactively, and working with developers and product managers to build and test these concepts. User experience designers work in cross-functional teams including experts in design, product strategy, technical architecture, software engineering, data science, and procurement. Responsible for conducting user research, analysis & synthesis, persona development, interaction design, and usability testing to create products that delight agency partners and the public. Research user needs as well as potential system enhancements.

Develop comprehensive research plans withan understanding of how disparate systems function and change over time with multiple user groups (for example: end-user, administrators, third parties).

Conduct stakeholder interviews, user needs analysis, task analysis, conceptual modeling, information architecture, interaction design, and usability testing. Lead and participate in participatory and iterative design activities, including observational studies, customer interviews, and usability testing. Produce user needs specifications & experience goals, personas, storyboards, scenarios, flowcharts, design prototypes, and design specifications. Plan and facilitate collaborative critiques and analysis & synthesis working sessions. Effectively communicate research findings, conceptual ideas, detailed design, and design rationale and goals both verbally and visually. Design new interfaces with low and high-fidelity mockups using methods like sketching, wireframing, and/or prototyping. Communicate credibly with a wide range of digital delivery disciplines and talent. Clearly communicates and works with stakeholders at every level.

User Interface Engineer

Minimum Education: AA or 2-year technical training or exp equivalent Minimum Experience: 4 years Responsibilities: Experience using modern front-end web development tools, techniques, and methods for the creation and deployment of user-facing interfaces. Comfortable working in an agile and lean environment to routinely deploy changes. Practice front-end web development using modern techniques and frameworks (e.g., HTML5, CSS3, CSS frameworks like LESS and SASS, Responsive Design, Bourbon, Twitter Bootstrap). Practice JavaScript development using modern standards, including strict mode compliance, modularization techniques and tools, and frameworks and libraries (e.g., jQuery, MV* frameworks such as Backbone.js and Ember.js, D3, Angular, React). Work in team environments that use agile methodologies (e.g., Scrum, Lean). Use version control systems, specifically Git and GitHub. Ensure Section 508 Compliance. Research and learnnew programming tools and techniques as necessary. Use and work with open-source solutions and community. Create web layouts from static images. Create views and templates in full-stack frameworks like Rails, Express, or Django. Work with open-source solutions and communities. Communicate technical concepts to a non- technical audience as necessary.

Technical Lead (cont.)

meaningful user stories to ensure effective product delivery. Communicate credibly with a wide range of digital delivery disciplines and talent. Clearly communicates and works with stakeholders at every level.

DevOps Engineer

Minimum Education: BA or exp equivalent / BS Minimum Experience: 6 years Responsibilities: Experience serving as the engineer of complex technology implementations in a product- centric environment. Comfortable with bridging the gap between legacy development or operations teams and working toward a shared culture and vision. Ensures system uptime and performance. Works to equip developers with the best tools. Deploy and configure services using infrastructure as a service provider (e.g., Amazon Web Services, Microsoft Azure, Google Compute Engine, RackSpace/OpenStack). Configure and manage Linux- based servers to serve a dynamic website. Debug cluster-based computing architectures. Use scripting or basic programming skills to solve problems. Install and manage open-source monitoring tools. Install and manage configuration management tools (e.g., Puppet, Chef, Ansible, Salt). Develop architecture for continuous integration and deployment as well as continuous monitoring. Install and manage containerization technologies(e.g., LXC, Docker, Rocket). Work with open-source solutions and communities. Communicate technical concepts to a non-technical audience as necessary.

Content Designer

Minimum Education: AA or exp equivalent Minimum Experience: 6 years Responsibilities: Experience developing the strategy and execution of content across digital channels. Assign, edit, and produce content for products, services, and various projects. Develop and maintain appropriate voice for produced content. Advise how to streamline content production and management solutions and processes based on user research. Plan and facilitate content strategy workshops and brainstorming sessions on developing content and content services, including API-based content services. Collaborate closely with developers and designers to create, test, and deploy effective content marketing experiences using agile methods. Collaborate with designers and other content strategists to measure the effectiveness of produced content.

Collaborate with content managers, writers, information architects, interaction designers, developers, and content creators of all types. Offer recommendations on how to deliver a consistent, sustainable, and standards-driven execution of content strategy across products,services, and projects. Define, create, and manage resource plans and other required project documentation such as style guides and provides updates as necessary.

Full Stack Software Engineer

Minimum Education: 8 years Minimum Experience: BA/ AA or exp equivalent Responsibilities: Experience using modern open-source software to prototype and deploy backend web applications, including all aspects of server-side processing, data storage, and integration with front end development. Comfortable working in an agile and lean environment to routinely deploy changes.

Practice web development using open-source web programming languages (e.g., Ruby, Python) and frameworks (e.g., Django, Rails). Develop and consume web-based, RESTful APIs. Work in team environments that use agile methodologies (e.g., Scrum, Lean). Author developer-friendly documentation (e.g., API documentation, deployment operations). Practice test-driven development.

Use version control systems, specifically Git and GitHub. Research and learn new programming tools and techniques as necessary. Work with both relational andnon-relational database systems. Work with scalable search technology (e.g. ElasticSearch, Solr). Handle large data sets and scaling their handling and storage. Work with open-source solutions and communities. Communicate technical concepts to a non-technical audience as necessary.

Visual Communications Designer- 3D

Experience: 4 years Responsibilities: Experience in all aspects of current 3D design and gaming programming standards andtrends and will be responsible for managing project design reviews, resource planning, and execution for all project work related to 3Ddesign. Create appropriate 3D artifacts, environments, and textures in a fast- paced, collaborative environment, research findings with visual storytelling, and product launch materials. Iterate quickly by collaborating on prototypes at various levels of fidelity. Incorporate continuous feedback from users, peers, and stakeholders by leading design-focused usability and critique sessions. Stay up-to-date with design application changes and industry developments. Participate as needed on agile software development teams.

Data Scientist

Minimum Education: BS or exp equivalent Minimum Experience: 8 years Responsibilities: Experience leading, analyzing, and performing work necessary to support the development and deployment of software systems that leverage emerging technologies such as artificial intelligence (AI). Comfortable working in an agile and lean environment to routinely deploy changes. Apply experience in the areas of artificial intelligence (AI), data science, and general data processing, covering a wide range of technology and applications, to the delivery of effective products and services. Plan and manage the development of advanced software projects leveraging emerging technologies such as artificial intelligence (AI). Use machine learning (ML) and statistical techniques to analyze and help productize collected data. Advise management and partners on new developments and advanced techniques in the area of data science. Apply data processing standards and knowledge of technical data to evaluate alternate approaches to problem solutions. Design, develop, implement, and maintain database systems. Work with open-source solutions and communities. Communicate credibly with a wide range of digital delivery disciplines and talent. Communicate technical concepts to a non-technical audience as necessary. Clearly communicates and works with stakeholders at every level.

Visual Communications Designer - 2D

Minimum Experience: 4 years Responsibilities: Experience in all aspects of current visual design standards and trends and will be responsible for managing project design reviews, resource planning, and execution for all project work related to visual design. Identify user and organizational needs through formal interviews, informal conversations, contextual inquiry, workshops, and analytics research. Identify visual design opportunities through exercises such as brand/interface audits, comparative or competitive analyses, gap analyses, and system mapping. Bring stakeholders together around shared design systems and visual identity goals and priorities. Create clear, inclusive, accessible, and extensible visual styles and components in a fast-paced, collaborative environment, including selecting and applying appropriate styles from the U.S. Web Design System, building interface patterns, prototypes, landing pages, logo and identity designs, brand or design principles, pattern libraries, research findings with visual storytelling, and product launch materials. Iteratequickly by collaborating on prototypes at various levels of fidelity. Incorporate continuous feedback from users, peers, and stakeholders by leading design-focused usability and critique sessions. Stay up-to-date with design application changes and industry developments. Participate as needed on agile software development teams.

Quality Assurance Engineer/Tester

Minimum Education: AA or exp equivalent Minimum Experience: 8 years Responsibilities: Experience leading, analyzing, and performing software testing using automated test suites.Comfortable working in an agile and lean environment to routinely identify quality assurance issues. Plan and manage the deployment of automated tests. Perform tests within software development lifecycle. Influence ticketing by identifying bugs and patch requirements. Communicate technical concepts to a non- technical audience as necessary. Clearly communicates and works with stakeholders at every level.

Technical Writer

Minimum Education: AA or exp equivalent Minimum Experience: 4 years Responsibilities: Experience documenting software features and functionality for users, administrators, and other roles as they relate to the platforms. Plan and manage the development of software documentation. Document, edit, and revise software and technical documentation to include Help and ticketing features. Produce high quality formatted documents with contents, paragraphs, headings, tables, diagrams, and appendices. Maintain version control and issue new documentation as software is upgraded or patched.

Frontline Engineer

Minimum Education: BA or exp equivalent Minimum Experience: 4 years Responsibilities: Experience maintaining software in a production environment. Plan and manage the development of software documentation. Document, edit, and revise software and technical documentation to include Help and ticketing features. Produce high quality formatted documents with contents, paragraphs, headings, tables, diagrams, and appendices. Maintain version control and issue new documentation as software is upgraded or patched.

Database Architect

Education: BA or exp equivalent Experience: 10 years Responsibilities: Experience leading, analyzing, and performing work necessary to support the deployment of software systems that leverage data from various sources. Comfortable working in an agile and lean environment to routinely deploy changes. Plan and manage the deployment and integration of databases used in advanced software projects leveraging emerging technologies.

Apply data processing standards and knowledge of technical data to evaluate alternate approaches to problem solutions. Design, develop, implement, and maintain database systems. Perform data migrations with proper handling of secure data. Communicate credibly with a wide range of digital delivery disciplines and talent. Communicate technical concepts to a non-technical audience as necessary. Clearly communicates and works with stakeholders at every level.

Highly Adaptive Cybersecurity Operator - Level II

Minimum Experience: 6 years Responsibilities: Conducts Penetration Testing, Incident Response, Cyber Hunt, Risk and VulnerabilityAssessments and other network operations to protect and defend critical IT infrastructure or to exploit cyber assets. Conducts and supports authorized penetration testing on enterprise network assets. Analyzes site/enterprise Computer Network Defense policies and configurations and evaluate compliance with regulations and enterprise directives. Assists with the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes). Collect intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential computer Network Defense incidents within the enterprise. Perform command and control functions in response to incidents. Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation. Collecting intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise. Coordinating with and provide expert technical

Highly Adaptive Cybersecurity Operator - Level I

Minimum Experience: 4 years Responsibilities: Conducts Penetration Testing, Incident Response, Cyber Hunt, Risk and Vulnerability Assessments and other network operations to protect and defend critical IT infrastructure or to exploit cyber assets. Conducts and supports authorized penetration testing on enterprise network assets. Analyzes site/enterprise Computer Network Defense policies and configurations and evaluate compliance with regulations and enterprise directives. Assists with the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes). Collect intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise. Perform command and control functions in response to incidents. Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation. Collecting intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise. Coordinating with and provide expert technical support to enterprise-wide Computer Network Defense technicians to resolve Computer Network Defense incidents. Correlating incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation Network Mapping - consists of identifying assets on an agreed upon IP address space or network range(s). Vulnerability Scanning - comprehensively identifies IT vulnerabilities associated with agency systems that are potentially exploitable by attackers.

Phishing Assessment - includes activities to evaluate the level of awareness of the agency workforce with regard to digital form of social engineering that uses authentic looking, but bogus, emails request information from users or direct them to a fake website that requests information.

Phishing assessments can include scanning, testing, or both and can be conducted as a one- time event or as part of a larger campaign to be conducted over several months. Wireless Assessment -includes wireless access point (WAP) detection, penetration testing or both and is performed while onsite at a customer’s facility. Web Application Assessment - includes scanning, testing or both of outward facingweb applications for defects in Web service implementation may lead to exploitable vulnerabilities. Provide report on how to implement Web services securely and that traditional network security tools and techniques are used to limit access to the Web Service to only those networks and systems that should have legitimate access. Operating System Security Assessment (OSSA) - assesses the configuration of select host operating systems (OS) against standardized configuration baselines. Database Assessment - assesses the configuration of selected databases against configuration baselines in order to identify potential misconfigurations and/or database vulnerabilities.

Highly Adaptive Cybersecurity Operator - Level III

Minimum Education: MA or exp equivalent Minimum Experience: 8 years Responsibilities: Conducts Penetration Testing, Incident Response, Cyber Hunt, Risk and Vulnerability Assessments and other network operations to protect and defend critical IT infrastructure or to exploit cyber assets. Conducts and supports authorized penetration testing on enterprise network assets. Analyzes site/enterprise Computer Network Defense policies and configurations and evaluate compliance with regulations and enterprise directives. Assists with the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes). Collect intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise. Perform command and control functions in response to incidents. Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.

Collecting intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise.

Coordinating with and provide expert technical support to enterprise-wide Computer Network Defense technicians to resolve Computer Network Defense incidents. Correlating incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation Network Mapping - consists of identifying assets on an agreed upon IP address space or network range(s). Vulnerability Scanning - comprehensively identifies IT vulnerabilities associated with agency systems that are potentially exploitable by attackers. Phishing Assessment - includes activities to evaluate the level of awareness of the agency workforce with regard to digital form of social engineering that uses authentic looking, but bogus, emails request information from users or direct them to a fake website that requests information. Phishing assessments can include scanning, testing, or both and can be conducted as a one-time event or as part of a larger campaign to be conducted over several months. Wireless Assessment - includes wireless access point (WAP) detection, penetration testing or both and is performed while onsite at a customer’s facility. Web Application Assessment - includes scanning, testing or both of outward facing web applications for defects in Web service implementation may lead to exploitablevulnerabilities. Provide report on how to implement Web services securely and that traditional network securitytools and techniques are used

General Services Administration Authorized Federal Supply Schedule Pricelist

Highly Adaptive Cybersecurity Operator - Level II (cont.)

support to enterprise-wide Computer Network Defense technicians to resolve Computer Network Defense incidents. Correlating incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation Network Mapping consists of identifying assets on an agreed upon IP address space or network range(s). Vulnerability Scanning comprehensively identifies IT vulnerabilities associated with agency systems that are potentially exploitable by attackers. Phishing Assessment - includes activities to evaluate the level of awareness of the agency workforce with regard to digital form of social engineering that uses authentic looking, but bogus, emails request information from users or direct them to a fake website that requests information.

Phishing assessments can include scanning, testing, or both and can be conducted as a one-time event or as part of a larger campaign to beconducted over several months. Wireless Assessment - includes wireless access point (WAP) detection, penetration testing or both and is performed while onsite at a customer’s facility. Web Application Assessment includes scanning, testing or both of outward facing web applications for defects in Web service implementation may lead to exploitable vulnerabilities.

Provide report on how to implement Web services securely and that traditional network security tools and techniques are used to limit access to the Web Service to only those networks and systems that should have legitimate access. Operating System Security Assessment (OSSA) - assesses the configuration of select host operating systems (OS) against standardized configuration baselines.

Database Assessment - assesses the configuration of selected databases against configuration baselines in order to identify potential misconfigurations and/or database vulnerabilities.

Critical Incident Response Consultant

Minimum Education: PhD or exp equivalent Minimum Experience: 8 years Responsibilities: Conducts timely Incident Response to exploit and/or respond to cyber assets.

Collect intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation ofpotential Computer Network Defense incidents within the enterprise. Perform command and control functions in response to incidents. Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation. Collecting intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise. Coordinating with and provide expert technical support to enterprise-wide Computer Network Defense technicians to resolve Computer Network Defense incidents. Correlating incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation Network Mapping - consists of identifying assets on an agreed upon IP address space or network range(s).

Attempts to recover critical information loss, assess implications of threat, and take remediation actions when applicable.

Software Engineer I

Minimum Education: AA or exp equivalent Minimum Experience: 2 years Responsibilities: Experience using modern open-source software to prototype and deploy backend web applications, including all aspects of server-side processing, data storage, and integration with front end development. Comfortable working in an agile and lean environment to routinely deploy changes.

Practice web development using open-source web programming languages (e.g., Ruby, Python) and frameworks (e.g., Django, Rails). Develop and consume web-based, RESTful APIs. Work in team environments that use agile methodologies (e.g., Scrum, Lean). Author developer-friendly documentation (e.g., API documentation, deployment operations). Practice test-driven development.

Use version control systems, specifically Git and GitHub. Research and learn new programming tools and techniques as necessary. Work with both relational andnon-relational database systems. Work with scalable search technology (e.g. ElasticSearch, Solr). Handle large data sets and scaling their handling and storage. Work with open-source solutions and communities. Communicate technical concepts to a non-technical audience as necessary.

Software Engineer II

Minimum Education: BA or exp equivalent Minimum Experience: 5 years Responsibilities: Experience using modern open-source software to prototype and deploy backend web applications, including all aspects of server-side processing, data storage, and integration with front end development. Comfortable working in an agile and lean environment to routinely deploy changes. Practice web development using open-source web programming languages (e.g., Ruby, Highly Adaptive Cybersecurity Operator - Level III (cont.)

to limit access to the Web Service to only those networks and systems that should have legitimate access. Operating System Security Assessment (OSSA) - assesses the configuration of select host operating systems (OS) against standardized configuration baselines. Database Assessment - assesses the configuration of selected databases against configuration baselines in order to identify potential misconfigurations and/or database vulnerabilities.

Information Assurance Specialist

Minimum Experience: 5 years Responsibilities: Review existing policies, procedures and guidelines to ensure compliance with Agency and departmental Information Assurance (IA) Policy. Draft, or revise policy documentation for Government review and approval, and organizational implementation. Coordinate with applicable cyber security entities for changes or modifications to hardware, software, or firmware. Support the performance of periodic reviews of security controls. Prepare certification and accreditation (C&A) documentation for submission to the Authorizing Official (AO) for Authority to Operate. Maintain the C&A Host Base Security Systems (HBSS), Information Assurance Computer Systems (IACS).

Create and validate SFLC C&A accounts with Trusted Agent (TA) Federal Information Systems Management Act (FISMA) and Risk Management System (RMS). Conduct vulnerability scans of assigned networks and databases. Provide assistance in the remediation of vulnerabilities identified through network scans. Maintain a tracking log for all Electronic Spillage activity. Support IA strategic planning activities to evaluate enterprise services through the assessment of priorities and risk. Create and maintain security-related documentation (System Design, System Security Plan, policies, security alerts, etc.) audience as necessary.

1 Degree equivalent: A Bachelor’s Degree is equal to a high school diploma plus at least four years of relevant professional experience. A Master’s Degree is equal to a Bachelor’s Degree plus a minimum of two years of professional experience or six years of professional experience. A Doctorate is equal to a Bachelor’s Degree plus 4 years of professional experience or eight years of professional experience.

Software Engineer II (cont.)

Python) and frameworks (e.g., Django, Rails). Develop and consume web-based, RESTful APIs.

Work in team environments that use agile methodologies (e.g., Scrum, Lean). Author developer-friendly documentation (e.g., API documentation, deployment operations). Practice test-driven development. Use version control systems, specifically Git and GitHub. Research and learn new programming tools and techniques as necessary. Work with both relational and non-relational database systems. Work with scalable search technology (e.g. ElasticSearch, Solr). Handle large data sets and scaling their handling and storage. Work with open-source solutions and communities.

Communicate technical concepts to a non-technical audience as necessary.

Software Engineer III

Minimum Education: BA or exp equivalent Minimum Experience: 10 years Responsibilities: Experience using modern open-source software to prototype and deploy backend web applications, including all aspects of server-side processing, data storage, and integration with front end development. Comfortable working in an agile and lean environment to routinely deploy changes. Practice web development using open-source web programming languages (e.g., Ruby, Python) and frameworks (e.g., Django, Rails). Develop and consume web-based, RESTful APIs. Work in team environments that use agile methodologies (e.g., Scrum, Lean). Author developer-friendly documentation (e.g., API documentation, deployment operations). Practice test-driven development. Use version control systems, specifically Git and GitHub. Research and learn new programming tools and techniques as necessary. Work with both relational and non-relational database systems. Work with scalable search technology (e.g.

ElasticSearch, Solr). Handle large data sets and scaling their handling and storage. Work with open-source solutions and communities. Communicate technical concepts to a non-technical audience as necessary.

1d. Labor Pricing—Labor Rates below are calculated at a 6% discount with a 2% escalation.

Consolidated Labor 2022-2023 2023-2024 2024-2025 2025-2026

Product Manager $183.15 $186.81 $190.55 $194.36

Project Manager $127.18 $129.73 $132.32 $134.97

Technical Lead $183.15 $186.81 $190.55 $194.36

User Experience Researcher/Designer $129.73 $132.33 $134.98 $137.67

User Interface Engineer $94.63 $96.52 $98.45 $100.42

Full Stack Software Engineer $129.73 $132.33 $134.98 $137.67

DevOps Engineer $155.41 $158.52 $161.69 $164.92

Content Designer $127.18 $129.73 $132.32 $134.97

Visual Communications Designer -2D $127.18 $129.73 $132.32 $134.97

Visual Communications Designer -3D $127.18 $129.73 $132.32 $134.97

Data Scientist $157.20 $160.35 $163.55 $166.82

Database Architect $155.41 $158.52 $161.69 $164.92

Quality Assurance Engineer/Tester $129.73 $132.33 $134.98 $137.67

Technical Writer $94.63 $96.52 $98.45 $100.42

Frontline Engineer $157.20 $160.35 $163.55 $166.82

Highly Adaptive Cybersecurity Operator I $96.51 $98.44 $100.41 $102.42

Highly Adaptive Cybersecurity Operator II $181.21 $184.84 $188.53 $192.30

Highly Adaptive Cybersecurity Operator III $205.39 $209.49 $213.68 $217.96

Critical Incident Response Consultant $234.17 $238.86 $243.63 $248.50

Software Engineer I $94.63 $96.52 $98.45 $100.42

Software Engineer II $129.73 $132.33 $134.98 $137.67

Software Engineer III $157.20 $160.35 $163.55 $166.82

Information Assurance Specialist $94.63 $96.52 $98.45 $100.42

Part Number Product Name Product Description Price

ACD-PR Hack The Box Academy HTB Academy Unlimited Access - 1 Year - 10 Users

$24,433.25

ACD-PR-ADD Hack The Box Academy Additional HTB Academy Unlimited Access - 1 Year - (Per user)

$2,443.32

DEDI-LAB Hack the Box Dedicated Labs HTB Dedicated Labs - 1 Year - 10 Users

$17,591.94

DEDI-LAB-ADD Hack the Box Dedicated Labs Additional HTB Dedicated Labs - 1 Year (Per user)

$1,759.19

PRO-LAB Hack the Box Professional Labs HTB Professional Labs - 1 Year - 10 Users

$17,591.94

PRO-LAB-ADD Hack the Box Professional Labs Additional HTB Professional Labs - 1 Year (Per user)

CLO-LAB Hack the Box Cloud Labs HTB Cloud Labs - 1 Year - 10 Users

$17,591.94

CLO-LAB-ADD Hack the Box Cloud Labs Additional HTB Cloud Labs - 1 Year (Per user)

CTF-SUB-CRD

Hack the Box CTF (Capture the Flag)

HTB Content (up to 10 Machines and Challenges) per 24 hours $2,443.32

CTF-PWN-USR Hack the Box CTF Pwnbox Pwnbox access (price per user)

$48.87

FDEV-PL1

HTB Workforce Development Plan #1

Bundle seat of Academy and Dedicated Labs

$4,202.52

FDEV-PL2

HTB Workforce Development Plan #2

Bundle seat of Academy, Dedicated Labs, and Professional Labs

$5,961.71

FDEV-PL3

HTB Workforce Development Plan #3

Bundle seat of Academy, Dedicated Labs, Professional Labs and Cloud Labs

$7,720.91

10% Quantity Volume Discount on all above products on orders 100+

Check via U.S. Mail: SixGen, Inc. 185 Admiral Cochrane Drive, Suite 210, Annapolis, MD 21401

Wire/Electronic Funds Transfer: Wire/bank transfers is our preferred method of payment. SixGen, Inc. will provide information for each task order and/or BPA.

Warranty provision: SixGen, Inc. warrants that the services provided will be in accordance with the scope of work for the task order and will be of the highest quality.