MAS - Horizon Industries, LIMITED - 47QTCA19D0032

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology

Contract number: 47QTCA19D0032

Contract period: December 10th, 2018 through December 9th, 2028

Horizon Industries, Limited

8245 Boone Blvd. Ste. 300

Vienna, VA 22182

(TEL) 703.955.4665 (FAX) 703.242.2325

Contract Administrator: Sunil Shamlal sunil.shamlal@hil.us www.hil.us

Business size: Small Business

For more information on ordering, go to the following website: https://www.gsa.gov/schedules

Price list current as of Modification #PS-0022, effective March 12, 2024

Prices Shown Herein are Net (discount deducted) http://www.hil.us/

TABLE OF CONTENTS

Customer Information

Labor Category Descriptions

Company Overview

GSA Pricing Applicable to SIN 54151HACS

GSA Pricing Applicable to 54151S

GSA Pricing Applicable to 541611

Horizon Horizon Industries, Limited

CUSTOMER INFORMATION:

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SIN DESCRIPTION

54151S IT Professional Services

54151HACS Highly Adaptive Cybersecurity Services (HACS) 541611 Management and Financial Consulting, Acquisition and Grants

Management Support, and Business Program and Project Management Services

OLM Order-Level Materials (OLM)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price.

Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply: See below

1c. Description of IT Services: See below

2. Maximum order: 54151S $500,000

54151HACS $500,000

541611 $1,000,000

OLM $250,000

3. Minimum order: $100.00

4. Geographic coverage: Domestic Delivery Only

5. Point(s) of production: Vienna, Fairfax County, Virginia

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

6. Quantity Discounts. None

7. Prompt payment terms. Net 30 days from receipt of invoice or date of acceptance, whichever is later. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). N/A

10a. Time of delivery. Horizon Industries shall deliver to destination within the number of calendar days specified on the order and as negotiated between the ordering activity and Horizon Industries.

10b. Expedited Delivery. If Horizon resources are available, Horizon Industries shall deliver services as soon as possible.

Horizon Industries, Limited

10c. Overnight and 2-day delivery. If Horizon resources are available, the customer may contact Horizon for rates for overnight and 2-day delivery.

10d. Urgent Requirements. Agencies may contact Horizon for any urgent requirement.

11. F.O.B. point. Destination

12a. Ordering address: Horizon Industries Limited, 8245 Boone Blvd., Suite 300, Vienna, VA 22182

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es): Horizon Industries Limited, 8245 Boone Blvd., Suite 300, Vienna, VA

22182

14. Warranty provision. N/A

15. Export packing charges, if applicable. N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable). N/A

17. Terms and conditions of installation (if applicable). N/A

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). N/A

18b. Terms and conditions for any other services (if applicable). N/A

19. List of service and distribution points (if applicable). N/A

20. List of participating dealers (if applicable). N/A

21. Preventive maintenance (if applicable). N/A

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). N/A

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g. contractor’s website or other location.) ICT accessibility standards can be found at: https://www.Section508.gov/.

23. Unique Entity Identification (UEI) Number: TP8ZGDNC1M94

24. Notification regarding registration in Central Contractor Registration (CCR) database.

Horizon Industries is registered in the System for Award Management (SAM).

CAGE Code: 1UH05

Horizon Industries, Limited

Labor Category Descriptions Program Manager Functional Responsibility: Works to assist customer’s key management and lead personnel to realize maximum benefit from an investment in IT equipment, personnel and business processes. Provides expert guidance in analysis, strategic planning, quality management, change management, business process re-engineering and the design of information technology architectures following agile principles where required. Conducts scrum master activities to include needs analysis, functional, technical, logical analysis and sprint planning. Supports feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and post-implementation projects. Manages multidisciplinary projects from inception to final deliverable, involving lead computer engineers, systems analysts and computer programmers, business analysts to achieve an integrated IT solution to customer’s requirements. Organizes, directs, and coordinates planning and execution of all program/technical support activities. Simultaneously plans and manages transition of several highly technical projects. Establishes or alters (as necessary) management structure to effectively direct program/technical support activities. Meets and confers with client management regarding the status of specific program/technical activities as well as problems, issues, or conflicts requiring resolution.

Minimum/General Experience: Possesses thorough knowledge of IT processes, principles and practices involved in computer-aided technical solutions. Must have an understanding of systems analysis, cost analysis and processes relevant to planned assignments. Has a minimum of three years working experience in a technical management capacity. Has demonstrated information technology expertise and communication skills to be able to interface with all levels of management.

Minimum Education: Master’s Degree in Computer Science or Equivalent Experience.

Systems Analyst Functional Responsibility: Analyzes business information system processing and design requirements across a range of capabilities, including numerous engineering, technical, business, and records management functions. Develops quality plans for information systems from project inception to conclusion. Analyzes system problems, supports configuration management requirements, and the information to be processed. Conducts needs analysis, functional, technical and logical testing, feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and supports software systems engineering. Defines the problem/support needed, and develops system engineering requirements and database specifications, from which programmers prepare detailed process and data flow charts, programs, and tests. Coordinates closely with programmers, business process owners and senior software engineers to ensure infrastructure and systems specifications. Develops test plans, performs data modeling, and assists with configuration and change management. Provides evaluation on a technical, functional, or cost basis for system design, development, testing, quality assessment, and software engineering functions for operations and maintenance. Assists with and/or performs database design and development.

Minimum/General Experience: Minimum of 2 years technical experience. Possesses vast experience in evaluating, developing and/or analyzing information systems (IS) or information technology (IT), financial analysis and business process modeling. This experience includes the use of client-server systems, distributed databases, both wide-area and local-area communications, and a performance-based acquisition process. A person in this category is expected to have knowledge of quality assurance standards, testing strategies, and certification compliance.

Minimum Education: Bachelor’s Degree Computer Science, Computer Information Systems, Business, Mathematics, or Equivalent Technical Studies/experience.

Horizon Industries, Limited

Program Specialist Functional Responsibility: Participates in the analysis and development of functional business/technical applications. Supports design specifications for functional activities. Performs detailed financial and economic modeling. Interacts with functional and technical personnel to translate detailed design into software applications. Provides unique and/or in-depth technical or business analysis and technical/business process reengineering (BPR) report development support within subject-matter areas requiring leading-edge or state-of-the-art technical and business expertise. May support a wide variety of technical and business process management assignments based on the specific needs of the task’s requirements. Analyzes user needs to determine functional requirements and support BPR efforts. Performs functional allocation to identify required tasks and their interrelationships. Identifies resources and costs required for each software / infrastructure development and/or maintenance task. Evaluates systems and business processes to conduct BPR related analysis. Prepares plans for COTS and custom software implementations including transition plans and staffing requirements.

Minimum/General Experience: Minimum of 1-year technical experience. IT/Financial specialist with working experience in finance, business analysis, systems functional analysis, quality management, database development, or data administration/standardization. Acquired skills include computer modeling and simulation. Trained in technical, cost, or business discipline specific to assignment.

Working knowledge and/or familiarity with systems acquisition and RFP process.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business, or other related discipline, or Equivalent Experience in a technical or business discipline.

Documentation Specialist Functional Responsibility: Participates in the performance of needs analysis, functional, technical, and logical analysis, feasibility studies, cost-benefit studies, life cycle analysis, briefings and presentations, report writing and post-implementation projects. Assists with all stages of source selection and the proposal process including the preparation of Requests for Information (RFI), Requests for Proposals (RFP) and Requests for Quotations (RFQ). Manages the data collection process and the development and maintenance of databases to support program/project management, data compilation, and the creation of final deliverables. Prepares technical and programmatic documentation when required.

Minimum/General Experience: Ability to apply the disciplines of operations research to the analysis of problems. Acquired skills include computer modeling and simulation, data collection and statistical analysis, evaluation of strategies and tactics under risk scenarios, test planning and conduct, etc.

Possesses skills utilizing software for the preparation of documents, spreadsheets, flow charts/diagrams, database structures, and presentations. Has strong organizational skills, experience utilizing project management software and knowledge of the Federal Acquisition process.

Minimum Education: Bachelor’s Degree or Equivalent Experience.

Technical Writer Minimum/General Experience: Requires a minimum of 2 years’ experience in technical research and writing. Must possess skills utilizing software for the preparation of documents, spreadsheets, flow charts/diagrams, database structures, and presentations. Has proven organizational skills, experience utilizing project management software and knowledge of the Federal Acquisition process. Functional Responsibility: Gathers, analyzes, and composes technical and financial information required for project engagements. Assists with/creates presentations, user manuals, help documentation, training materials, and installation guides. Assists with the development of technology related procurements.

Provides assistance in preparing proposals, Requests for Information (RFI), Requests for Proposals (RFP) and Requests for Quotations (RFQ), presentations, reports and other client

Horizon Industries, Limited deliverables/documents as appropriate.

Minimum Education: Associate Degree or Equivalent Experience

Senior IT Analyst/Designer Functional Responsibility: Perform business and technical systems analyst functions, including workshop facilitation, business process reengineering, data validation, application testing from a functional and infrastructure perspective, program development, unit testing of the application code from a technical perspective, work group/work session participation, and delivery of technical and business solutions. Implements databases that are the result of business system planning and data requirement planning. Provides support for systems development and database administration including database design. Creates test strategies, test plans and executes project testing including all aspects of configuration management. Assists with the analysis of information system baseline and perform systems engineering functions for the systems requirements and the cyber security assessments of enterprise applications. Also perform business and technical designer functions, including making contribution to both the business and software architecture components of the solution, supporting infrastructure planning/functional area/business process specialists and servings as the relevant technology subject matter expert, supporting architecture/product/technology specialists and experts, and review/assess enterprise solution products for accuracy and consistency. Manages all aspects of Quality assurance and provides work direction and guidance to other personnel; ensures quality and accuracy for cyber security compliance (RMF / FISMA), operates under deadlines, able to work on multiple tasks.

Minimum/General Experience: Requires seven years of application team experience. May team lead or serve as a project manager, including planning tasks, assigning resources to the task, monitoring and tracking progress, and informing project management on all project activities. Possess a thorough knowledge of IT development life cycle, principles and practices involved in architecting technical solutions. Has expertise of systems analysis, cost analysis and processes relevant to planned assignments. Has demonstrated information technology expertise and communication skills to be able to interface with all levels of management.

Minimum Education: Master’s Degree in Computer Science, Computer Information Systems, Business, Mathematics, or Equivalent Technical Studies/experience.

Project Manager Functional Responsibility: Responsible for all aspects of assigned projects and provides a single point of contact for those projects. Manages the agile process of definition of project scope and objectives.

Manages the development of detailed work plans, schedules, project estimates, resource plans including budgets, and status reports in the role of a scrum master. Conducts project meetings and is responsible for project tracking and analysis. Ensures adherence to quality and cyber security / FISMA standards and reviews project deliverables. Manages the integration of subcontractor tasks and tracks and reviews subcontractor deliverables. Provides technical and analytical guidance to project team and acts as an agile coach. Recommends and takes action to direct the analysis and solutions of problems.

Minimum/General Experience: Minimum of 7 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

Horizon Industries, Limited

Trainer/Facilitator Functional Responsibility: Develops training plans, delivers and evaluates training material for programs or IT facilitator activities. Provides guidance on developing instruction and training for customers., facilitates training activities to include procedures, processes, techniques, tactics, products or skill development.

Minimum/General Experience: Minimum of 2 years relevant experience is required. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in subject-related technical or business area, or Equivalent Experience.

Sr. Trainer/Facilitator Functional Responsibility: Develops, directs, plans, delivers and evaluates training programs /plans, conducts IT facilitator activities. Provides support to develop and deliver direct instruction and training to customers. facilitates training activities to include procedures, processes, techniques, tactics, products or skill development.

Minimum/General Experience: Minimum of 9 years relevant experience is required. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in subject-related technical or business area, or Equivalent Experience.

Sr. Developer Consultant Functional Responsibility: Serves as a senior member of development teams as a task manager, data analyst, RMF lead or as a project leader on projects. As a consulting team member, collects, analyzes, and interprets data, including performing database administrator functions. Supports development functions in one or more information technology specialties. Develops, or participates in the development of IT and software solutions to include configuration management, testing and quality management.

Minimum/General Experience: Minimum of 5 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

Systems Developer Functional Responsibility: : Uses agile principals for design development, coding, testing and debugging software solutions. Using Systems engineering principals supports the development of database designs and database management, works with technical and functional staff to configure IT solutions and develops software architecture specifications and creates test plans. Resolves customer complaints and responds to suggestions for improvements and enhancements. Participates in the development of user manuals. May act as team leader. Assist in training, RMF Support, configuration management and Information Assurance on software development projects. Supports all aspects of infrastructure development for software engagements.

Minimum/General Experience: Minimum of 3 years of experience is required. Must be able to participate as high-level technical expert.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering or Equivalent Experience.

Horizon Industries, Limited

Subject Matter Expert Functional Responsibility: Provides unique and/or in-depth technical or business analyses and expertise within leading-edge or state-of-the-art technical and business areas. May support a wide variety of functions for technical and business assignments based on the specific needs of the task’s requirements, such as software architect, lead engineer, or systems architect.

Minimum/General Experience: Minimum of 5 years of experience is required providing technical expertise within a specific subject area or discipline. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Master’s Degree in subject-related technical or business area, or Equivalent Experience.

Software Developer Consultant Functional Responsibility: Serves as a consulting team member with a Software Development background. Collects data in accordance with plans developed by others. Verifies and analyzes data to identify trends and relationships as well as current and potential technical and management problems.

Drafts reports of findings along with related documentation.

Minimum/General Experience: Minimum of 4 years of experience is required, which includes all aspects of project management. Must be able to interact with all levels of client representatives. Must possess strong interpersonal skills and have strong writing abilities.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business or Equivalent Experience.

Sr. Program Specialist Functional Responsibility: Participates in the analysis of functional business/technical applications and design and development of software. Performs detailed RMF support. Interacts with functional and technical personnel to translate detailed design into software applications. Provides unique and/or in-depth technical or business analysis and technical/business report development support within subject-matter areas requiring technical and business expertise. May support a wide variety of information assurance, technical, and business assignments based on the specific needs of the task’s requirements.

Analyzes information system user needs to determine functional requirements. Performs functional analysis to identify processes and their interrelationships including the support of BPR. Identifies resources and costs required for each information system development and/or maintenance task.

Evaluates systems and business processes to conduct Fit-Gap or other related analysis. Prepares plans for implementations including transition plans and staffing requirements.

Minimum/General Experience: Minimum of 3 years of technical experience. IT/Financial specialist with working experience in finance, business analysis, systems functional analysis, quality management, database development, or data administration/standardization. Acquired skills include computer modeling and simulation. Trained in technical, cost, or business discipline specific to assignment.

Working knowledge and/or familiarity with systems acquisition and RFP process.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business, or other related discipline, or Equivalent Experience.

Program Analyst Functional Responsibility: Assists and participates in developing business requirements, including supporting efforts of senior scrum managers for project execution processes by performing analyses and provide result for recommendations; identifies test plans and test results; monitors configuration management adjustment request to determine timely processing; compiles and prepares written reports for quality analysis and business systems analysis; reports require the ability to research, Horizon Industries, Limited analyzes, test systems, interprets data, configuration items and sustains conclusions through the extensive use of supplemental computer applications to produce the final products; reviews various report, researches to correct invalid or erroneous transaction; maintain record management program.

Minimum/General Experience: Minimum 3 years of technical experience.

Minimum Education: Bachelor’s Degree in Computer Science, Information Systems, Engineering, Business, or other related discipline, or Equivalent Experience.

Cyber Compliance Manager Functional Responsibility: The Cyber Compliance Manager is accountable for the monitoring and enforcing compliance to IT and cyber security policies and governing procedures to reduce risk to cyber incidents and potential areas of non-compliance. Responsible for understanding and assessing technology and operational risks related to internal technology solutions and at times, might be asked to provide input to personnel on appropriate controls to address those risks.

Minimum/General Experience: Seven (7) years of relevant experience. Meets or exceeds current industry certification requirements. Familiar with NIST RMF framework and associated practices.

Experience with systems and network administration including Microsoft product environments (Windows Server, SharePoint Server, SQL Database, Project Server, Lync Server, and Exchange Server) specifically in the 2012 / 2013 versions, and Cisco environments to include perimeter routers, firewalls, IDS/IPS solutions, and network level 2/3 switch environment. Experience with cyber compliance methodologies.

Minimum Education: Bachelor’s degree or equivalent.

Computer Network Defense (CND) Auditor Functional Responsibility: Applies technical and functional expertise to support network-based vulnerability scanning and computer network defense operations for large scale enterprise networks.

Performs monthly and ad hoc vulnerability scans of unclassified and classified network subscriber enclaves. Maintain knowledge of emerging threats, vulnerabilities, and intelligence within the cyber security field to ensure subscribers are remediating against known threats. Assist subscribers with vulnerability remediation as necessary. Conduct trending and analysis of monthly results to identify high risk vulnerabilities impacting the network and ensure proper security posture from a vulnerability management standpoint. Deploy, troubleshoot, and maintain network-based vulnerability scanners at subscriber sites to ensure appropriate coverage of scanning services. Maintain knowledge of applicable CND policies, regulations, and compliance documents specifically related to CND auditing. Prepare reports for subscribers to assess technical configurations and compliance. Capture as necessary of the network(s) security posture and provide to CND management for situational awareness. Document policies and procedures for the use of vulnerability assessment tools and methodologies. Test and evaluate new technologies, specifically related to network vulnerability scanning.

Minimum/General Experience: Seven (7) years of relevant experience. Meets or exceeds current industry certification requirements. Understanding of Information Assurance (IA) and Computer Network Defense (CND) concepts, practices, and tools to design and administer classified and unclassified DoD computer networks and systems. Ability to communicate complex technical and programmatic information, often in the form of verbal and visual operational updates, situation reports and briefings. Computer helpdesk, Systems Administration, Network Administration, and strong customer service skills preferred. Understanding of TCP/IP networking required, experience with cyber security related tools preferred. Familiarity of Windows Server/Workstation operating systems required, familiarity of Unix/Linux preferred. Familiarity with CJCSM 6510 and DoD 8140.1 (desired).

Experience with Computer Emergency Response Team (CERT) or Security Operations Center (SOC) operations (desired).

Horizon Industries, Limited

Minimum Education: Bachelor’s degree or equivalent.

Computer Security Systems Specialist Functional Responsibility: Analyzes and defines security requirements for Multilevel Security (MLS) issues. Designs, develops, engineers, and implements solutions to MLS requirements. Responsible for the implementation and development of the MLS. Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides technical support for secure software development and integration tasks, including reviewing work products for correctness and adhering to the design concept and to user standards. Knowledgeable of Security/Information Assurance (IA) products such as PKI, VPN, firewalls, and intrusion detection systems. Analyzes and recommends resolution of security/IA problems based on knowledge of the major IA products and services, an understanding of their limitations, and knowledge of the IA disciplines.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Cyber Security Analyst Functional Responsibility: Investigates and contributes to large scale, complex computer security incident response events on a global network. Leverages advanced tools to identify and mitigate malicious activity, ranging from malware to potential interactive intrusions. Analyzes computer systems and network traffic for signs of infection or compromise. Characterizes suspicious binaries and be able identify traits. Identify potential malicious activity from memory dumps, logs, and packet captures.

Interact and assist other investigative teams on time sensitive, critical investigations. Participates as part of a close team of technical specialists on coordinated responses and subsequent remediation of security incidents. Serves as escalation point and performs further triage on escalated incidents and events. Provides briefings to leadership. Senior Cyber Security Analyst will act as a subject matter expert on information security related issues pertaining to malware analysis and incident response.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Cyber Security Operations Manager Functional Responsibility: Leads Cyber Security Incident Response (CSIR) efforts across an organization including determination of the criticality of an incident, appropriate containment, and mitigation activities. Prioritizes advanced computer and network forensic investigations relating to various forms of malware, computer intrusion, theft of information, denial of service, and data breaches.

Oversees the execution of Cyber Security Incident Response others for minor security incidents.

Establishes and maintains strong working relationships with all teams required to support incident response. Improves Incident Response processes by taking advantage of and integration with new technologies and capabilities.

Minimum/General Experience: Five (5) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Horizon Industries, Limited

Cyber Security Program Manager Functional Responsibility: Responsible for all contract activities for a Cyber Security related program.

Sets policies and procedures, technical standards and methods, and priorities. Coordinates the management of all work performed on tasks under the contract. Coordinates the efforts of subcontractors, team members, and vendors. Acts as the central point of contact with the Contracting Officer, the Contracting Officer’s Representative, and other client officials. Works independently, or under the general direction of senior level company management, on all phases of performance including contract management, project/task order management, coordination of resource needs, coordination with corporate resources and management.

Minimum/General Experience: Seven (7) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Cyber Security System Engineer Functional Responsibility: Assist in planning, design, implementation, and maintenance of the enterprise computer network defense capabilities from the enterprise down to the end point. Assumes a key role in providing ongoing expertise for Client's tactical and strategic cyber security incident response initiatives. Facilitates business enablement activities, including incident response, workflow & best practices and ensures key project milestones are achieved. Technical troubleshooting and root-cause analysis of solutions currently installed within the Client infrastructure. Assist with on-going architecture updates for diagrams, configuration guide(s), and supporting documentation when necessary. Leads the capture of relevant IT requirements and assists team leads and project managers with information assurance architecture and designs. Once deployed, maintains and tunes information assurance systems across network, data center, cloud, and at the application layer as needed. Integrates and customizes information assurance systems.

Minimum/General Experience: 4 years of project related experience. Strong command of networking and general IT, which can include OSI model, routing/switching and network security architecture, basic encryption, operating systems, Message transfer agents, Web Proxies, IDS. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Cyber Threat Intelligence Analyst Functional Responsibility: Provides cyber intelligence analysis including the reviews classified and unclassified cyber news feeds, signature updates, incident reports, threat briefs, and vulnerability alerts from external sources and to determine its applicability to the customer environment. Disseminates information externally within the cyber intelligence community. Interprets and compiles the information received about emerging threats at different classification levels through data feeds from Internet security firms, Government organizations, private industry, and foreign Governments into actionable monitoring either by developing custom content or by some other means. Identifies potential threats based on enterprise utilized hardware and software and accounts for current and evolving hacking tools and methodologies available to disrupt these systems. Participates in cybersecurity exercises. Designs, leads, or supports cybersecurity exercises and supports Blue Team/Red Team activity.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Horizon Industries, Limited

Ethical Hacker Functional Responsibility: Performs application analysis, reverse engineering, malware analysis, protocol analysis, and debugging. Penetrates networks or computer systems to identify computer security vulnerabilities. Demonstrates a general understanding of how social engineering is used to compromise networks and end devices. Possesses proficient knowledge of multiple operating systems and hacking techniques. Possesses excellent communications skills and is comfortable speaking in public. Leads Red Teams and authors’ penetration testing Rules of Engagement. Leads teams and oversees penetration testing. Working knowledge with commercial and open-source tools and experience with multiple programming languages. Experience with hardware-based and software security exploits and experience with reverse engineering and assembly language. Experience supporting Red Teams in the Department of Defense, Homeland Security, Intelligence Community, or other federal agencies.

Minimum/General Experience: Two (2) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Forensics Analyst Functional Responsibility: Conducts forensic acquisition and analysis of cyber security incidents.

Performs "Hunt Operations" actively searching for indicators of compromise. Provides information for the indicator database and assists with signature creation and tuning to ensure proper agency cyber defenses. Works directly with system administrators to remediate systems to mitigate and/or prevent incidents of compromise. Actively work to reduce and mitigate findings from “Hunt Operations” or from other assessments and will report progress as requested by the Government. Assists or leads digital forensics investigations. Experience maintaining chain of custody and cataloguing evidence/information related to forensics investigation. Experience in eDiscovery and possesses working knowledge of EnCase or similar forensics tools.

Minimum/General Experience: Three (3) years of project related experience. Meets or exceeds current industry certification requirements.

Minimum Education: Bachelor’s degree or equivalent.

Incident Handler Functional Responsibility: Performs and interprets vulnerability assessments and troubleshoots and resolves network/operating system security issues. Administers the operations of a security infrastructure and serves as a member of a security operations team monitoring all aspects of network security. Monitor, contextualize and provide reporting on a wide variety of network data feeds that may include network logs, syslogs, firewall logs, netflow data, and IDS/IPS logs. Leveraging experience in network exploitation and defense, maintain a current knowledge of attack vectors and methodologies and apply this knowledge to identify vulnerabilities in an assigned network. Serve as Incident Lead for response actions to security incidents including but not limited to External Cyber Attacks, Security Violations, Insider Threat Behaviors, Classified Spillages and Configuration-based Threats. Represent the Security Team in collaborative efforts across multiple Operations and Maintenance Teams to ensure risk awareness, security best-practices, and to assist these teams in deploying and maintaining the network at the lowest possible risk accepted by the client. Ensures system security needs established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability testing and scanning, incident response, disaster recovery, and business continuity planning and provides analytical support for security policy development and analysis.

Integrates new architectural features into existing infrastructures, designs cyber security architectural

Horizon Industries, Limited artifacts, provides architectural analysis of cyber security features, and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration and testing issues.

Minimum/General Experience: Two (2) years of project related experience. Possess one or more security related certifications, preferably GCIH or equivalent, CEH, etc. A solid foundation in networking, with a good understanding of TCP/IP and other core protocols. Experience in network, host, data and/or application security in a Windows/Unix/Linux operating environment. Background in information security operations e.g., incident response and monitoring services. Knowledge of network-based services and client/server applications. Experience with programming/scripting languages (e.g., Python/Perl). Experience with enterprise information security data management tools/SIEM such as ArcSight or Splunk.

Minimum Education: Bachelor’s degree or equivalent.

Incident Responder Functional Responsibility: Actively monitor systems and networks for intrusions. Identify security flaws and vulnerabilities. Perform security audits, risk analysis, network forensics and penetration testing. Perform malware analysis and reverse engineering. Develop a procedural set of responses to security problems. Establish protocols for communication within an organization during security incidents. Produce detailed incident reports and technical briefs for management, administrators and end-users. Liaison with other cyber threat analysis entities.

Minimum/General Experience: Two (2) years of project related experience. Possess one or more security related certifications, preferably GCIH or CEH, or equivalent. A solid foundation in networking, with a good understanding of TCP/IP and related protocols. Experience in network, host, data and/or application security in a Windows/Unix/Linux operating environment. Background in information security operations e.g., incident response and monitoring services. Knowledge of network-based services and client/server applications. Experience with programming/scripting languages (e.g., Python/Perl). Experience with enterprise information security data management tools/SIEM such as ArcSight or Splunk.

Minimum Education: Bachelor’s degree or equivalent.

Incident Response Analyst Functional Responsibility: Collects and analyzes cyber event information and performs threat or target analysis duties. Provides operations for persistent monitoring on a 24/7 basis of all designated networks, enclaves, and systems. Interprets, analyzes, and reports all events and anomalies in accordance with computer network directives, including initiating, responding, and reporting discovered events. Provides oversight of incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets. Performs real-time proactive security monitoring and reporting on various security enforcement systems, such as SIEM, anti-virus, internet content filtering/reporting, malcode prevention, firewalls, IDS & IPS, Web security, anti-spam, etc.

Minimum/General Experience: Two (2) years of related technical experience. Possess one or more security related certifications, preferably GCIH, CEH, or equivalent . Experience working cyber incident management, threat/network defense and troubleshooting.

Horizon Industries, Limited

Incident Response Coordinator Functional Responsibility: Responds to crisis or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security.

Handle and response and forensic investigations in relation to computer security incidents and escalate when necessary as well as coordinate response to computer security incidents. Recommend a course of action on each incident and creates, manages, and records all actions taken and serve as initial POC for Events of Interest reported both internally and externally. Establishes alarm/incident escalation process and tracks, follows-up, and resolves incidents. Initiates and maintains contact with affected parties during incident response lifecycle. Investigates potential incidents/intrusions.

Minimum/General Experience: Three (3) years of project related experience. Possess one or more security related certifications.

Minimum Education: Bachelor’s degree or equivalent.

Information Assurance Security Engineer Functional Responsibility: Provide analysis of existing and emerging Information Systems and IT Infrastructure to assess compliance with applicable Information Assurance policy. Reviews both existing and draft/proposed policy against system design documentation and identify any areas of non-compliance. Assist with and/or conduct Security Test and Evaluation and IA assessment reviews as a way of validating compliance with IA policy. Review all proposed and draft policies and provide an assessment of the impact of the proposed policy on IT and IA architecture. Develop and document standards and guides for the implementation of IA solutions including but not limited to, compliance, system security design, security testing and IA assessments. Prepare training materials to assist in the transition of procedures and policies for the Cyber Security tools to client. Create baseline environments for hosting Cyber Security tools for intrusion detection/prevention systems (IDS/IPS), log aggregation/correlation, compliance monitoring and remediation, and Host Based Security System (HBSS) and other emerging technologies (hereafter referred to as Cyber Security tools).

Minimum/General Experience: Four (4) years relevant IT experience. Possess one or more security related certifications.

Minimum Education: Bachelor’s degree or equivalent.

Intrusion Analyst Functional Responsibility: Work with a team to provide day-to-day support to manage and perform active defense and prevention network security monitoring functions. Perform advanced data mining, event and correlation for IDS/IPS detected incidents and work with the Security Engineers to improve overall detection/prevention capabilities. Provide technical analysis of network activity; the analyst monitors and evaluates network event data, signature-based IDS events and full packet capture (PCAP) data. Triage IDS alerts, collect related data from various network analysis systems, review available open and closed source information on related threats & vulnerabilities, prepare initial summary reports. Monitor and analyze signature-based IDS alerts and associated packet (PCAP) data. Analyze network flow data for anomalies and correlate reporting with enterprise-wide network activity.

Document key event details and analytic findings in an incident management system. Perform incident correlation & escalation. Communicate and collaborate with analysts from other SOC organizations to investigate cyber events. Assess cyber indicators/observables and collaborate in the development of IDS signatures and detection mechanisms. Monitor and report on trends and activity on network sensor platforms. Provide technical assessments of cyber threats and vulnerabilities. Develop, maintain and update standard operating procedures. Provide routine status updates for ongoing projects, trouble tickets, incidents, and other related tasks. Maintain awareness of major events and trends in the cyber

Horizon Industries, Limited security landscape. Ensure that all alerts are monitored, interpreted, analyzed, and investigated. Utilize external reporting tools for threat intelligence. Monitor all security-relevant logs and alerts for signs of compromise, attack, or system misuse and policy violations. Write detailed incident reports. Collect incident and investigation metrics and trending data, identify key trends, and provide situational awareness on these trends. Monitor all-source threat reporting.

Minimum/General Experience: Two (2) years Intrusion Detection/Intrusion Prevention (IDS/IPS) experience. Possess one or more security related certifications.

Minimum Education: Bachelor’s degree or equivalent.

Managing Security Consultant Functional Responsibility: Directs the Cybersecurity and IA teams in the delivery of information security, information security systems, and/or computer security requirements. Architects, assesses, develops, engineers, and implements Cybersecurity solutions. Retrieves, gathers, and organizes technical information about an organization’s risks, vulnerabilities, and exposures within the existing security products, networks, applications, and programs. Develops, analyzes, and implements Cybersecurity architecture(s) as appropriate. Performs risk analysis assessments, conducts Cybersecurity governance and compliance services, develops analytical and technical reports as required. May be required to perform in one or more of the following areas: risk and vulnerability assessments; cyber hunting activities; conducting penetration testing and scanning; assessment of system security for compliance; security of computer network hardware; operating system utility/support software; disaster recovery; incident response and digital forensics; application assessment; vulnerability threat management; cloud security; contingency planning; social engineering;

and the development of security policies and procedures. May be responsible for leading a team in performing these services.

Minimum/General Experience: Ten (10) years of experience. Must possess one or more security related certifications.

Minimum Education: Bachelor’s degree for equivalent.

Risk/Vulnerability Analyst Functional Responsibility: Provide expertise in vulnerability management processes and network vulnerability scanning. Configure network scans, schedule network scans to run with bandwidth use in mind, and ensure accurate vulnerability assessment results are generated and made available to appropriate personnel. Configure vulnerability assessment tools to perform vulnerability scanning on enterprise network. Troubleshoot issues arising from vulnerability scanning and serve as technical expert for vulnerability assessment tools.

Minimum/General Experience: Three (3) years providing vulnerability assessment and troubleshooting. Windows, UNIX, and Linux operating systems support experience.

Minimum Education: Bachelor’s degree for equivalent.

Security Analyst Functional Responsibility: Assisting member of a team for delivering on a specific Cybersecurity task of a small/simple projects individually and large projects as a team member with oversight and continual skill development.

Minimum/General Experience: Two (2) years of relevant experience.

Horizon Industries, Limited

Security Consultant Functional Responsibility: Assists more…