MAS - Dynamic Security Concepts Inc. - 47QTCA19D00EF

1 | P a g e

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

AUTHORIZED FEDERAL SUPPLY SCHEDULE PRICE LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group MAS

SPECIAL ITEM NUMBER 54151HACS --- Highly Adaptive Cybersecurity Services SPECIAL ITEM NUMBER 54151S --- Information Technology (IT) Professional Services

FPDS Code D302IT Systems Development Services FPDS Code D307 Automated Information Systems Design and Integration Services FPDS Code D308 Programming Services FPDS Code D310IT Backup and Security Services FPDS Code D311IT Data Conversion Services FPDS Code D316IT Network Management Services FPDS Code D399 Other Information Technology Services, Not Elsewhere Classified

Contract Number – 47QTCA19D00EF

For more information on ordering from Federal Supply Schedules click on the FSS Schedules button at fss.gsa.gov.

Contract period – June 27, 2019 through June 26, 2024

Contractor:

CONTRACTOR:

Dynamic Security Concepts, Inc.

1037 Morningside Drive

Mays Landing NJ, 08330

Phone: (609) 625-3942 Fax: (609) 625-7215

Contract Administration source:

Sue Hopkins

1037 Morningside Drive

Mays Landing NJ, 08330

Phone: (609) 625-3942 Fax: (609) 625-7215

Current through Modification No. PS-0008 effective March 4, 2024.

2 | P a g e

CUSTOMER INFORMATION

1a. Table of Awarded special item numbers: 54151HACS, 54151S, OLM

1b. Identification of the lowest priced model number and lowest unit price: N/A

1c. Hourly Rates

SIN LABOR CATEGORY

Government

Site

54151HACS Information Assurance I (IT Security Specialist) $79.97

54151HACS Information Assurance II (IT Security Specialist) $135.78

54151HACS Information Assurance III (IT Security Specialist) $129.96

54151HACS Program Manager II $163.53

54151HACS Program Manager III $175.17

54151HACS Project Manager III $162.23

54151HACS Subject Matter Expert II $175.12

54151HACS Subject Matter Expert III $201.23

54151HACS Technical Writer III** (Documentation Specialist) $73.78

54151HACS Test Engineer III $130.46

SIN LABOR CATEGORY

Government

Site

54151S Analyst II $66.64

54151S Computer Systems Analyst IV $145.04

54151S Configuration Management Specialist II $102.78

54151S Engineering Support Analyst I $88.43

54151S Functional Analyst $95.93

54151S Information Technologist $65.67

54151S Information Assurance II $135.78

54151S Information Assurance III $129.96

54151S IT Subject Matter Expert II $175.12

54151S IT Subject Matter Expert III $201.23

54151S Manager VI $147.62 54151S Principal Technologist $227.78 54151S Program Director $173.05

54151S Project Engineer III $147.04

54151S Project Specialist $106.91

54151S Senior Business Specialist $112.20

54151S Sr. Info Technologist $100.06

54151S Sr. Sys Dev Engineer $158.49

54151S Systems Technologist I $164.16

54151S Technical Analyst II $106.36

54151S Technical Analyst III $128.31

3 | P a g e

2. Maximum Order:

54151HACS - $500,000

54151S - $500,000

OLM - $250,000

3. Minimum Order: $100.00

4. GEOGRAPHIC COVERAGE (delivery area): Domestic Delivery

5. POINT OF PRODUCTION

Dynamic Security Concepts, Inc.

1037 Morningside Drive

Mays Landing NJ, 08330

Phone: (609) 625-3942 Fax: (609) 625-7215

6. DISCOUNT: Prices shown are NET Prices; Basic Discounts have been deducted

7. QUANTITY DISCOUNTS: None

8. PROMPT PAYMENT TERMS: None - Net 30 days

9a. Government purchase cards are accepted at or below the micro-purchase threshold.

9b. Government purchase cards are not accepted above the micro-purchase threshold.

10. FOREIGN ITEMS: None

11a. TIME OF DELIVERY: The Contractor shall deliver to destination within the number of calendar days after receipt of order (ARO), as set forth below:

SPECIAL ITEM NUMBER DELIVERY TIME (Days ARO)

54151HACS To Be Negotiated per Task Order 54151S To Be Negotiated per Task Order

11b. EXPEDITED DELIVERY: Items available for expedited delivery are noted in this price list.

11c. EXPEDITED DELIVERY may be available. Contact Contractor for more information.

11d. URGENT REQUIREMENTS: When the Federal Supply Schedule contract delivery period does not meet the bona fide urgent delivery requirements of an ordering activity, ordering activities are encouraged, if time permits, to contact the Contractor for the purpose of obtaining accelerated delivery. The Contractor shall reply to the inquiry within 3 workdays after receipt.

(Telephonic replies shall be confirmed by the Contractor in writing.) If the Contractor offers an accelerated delivery time acceptable to the ordering activity, any order(s) placed pursuant to the agreed upon accelerated delivery time frame shall be delivered within this shorter delivery time and in accordance with all other terms and conditions of the contract.

12. FOB point: Destination

4 | P a g e

13a. ORDERING ADDRESS: Same as Contractor

13b. ORDERING PROCEDURES: Contact Contractor

14. PAYMENT ADDRESS: Same as Contractor

15. WARRANTY PROVISION: Not applicable

16. Export packing charges, if applicable: None

17. Terms and conditions of Government purchase card acceptance (any thresholds above the micro-purchase level): None

18. Terms and conditions of rental, maintenance, and repair: None

19. Terms and conditions of installation: None

20. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices: None

20a. Terms and conditions for any other services: None

21. List of service and distribution points: None.

22. List of participating dealers: None

23. Preventive maintenance: None

24a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants): None

24b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (http://www.dscinc.net/). The EIT standards can be found at:

www.Section508.gov/.

25. Unique Entity Identifier (UEI) number: GZ6BMFBMQ869

26. Notification regarding registration in System for Award Management (sam.gov) database. Contractor has an active registration.

http://www.section508.gov/

5 | P a g e

LABOR CATEGORY DESCRIPTIONS SIN 54151HACS

Labor Category: Information Assurance I (IT Security Specialist)

Description:

Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. Oversees the efforts of security staff to design, develop, engineer and implement solutions to security requirements. Responsible for the implementation and development of the DHS IT security.

Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. A working knowledge of several of the following areas is required: understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols;

encryption techniques/tools; familiarity with commercial products, and current Internet/EC technology. Ability to serve as Information System Security Officer. Provides daily supervision and direction to staff.

Knowledge, Skills and Abilities:

Minimum of 1 year of Information Assurance experience, including support of telecommunications, system installation, data automation, or a related field.

Minimum Experience: 1 year

Minimum Education Requirements: High School diploma or GED certification

Highly Desirable: Knowledge of FISMA; CISSP certification

Labor Category: Information Assurance II (IT Security Specialist) facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. Oversees the

6 | P a g e efforts of security staff to design, develop, engineer and implement solutions to security requirements. Responsible for the implementation and development of the DHS IT security.

Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. A working knowledge of several of the following areas is required: understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols;

encryption techniques/tools; familiarity with commercial products, and current Internet/EC technology. Ability to serve as Information System Security Officer. Provides daily

Two years experience in the application of information assurance, engineering principles and techniques in the secure design, development, integration, analysis, operation, maintenance, testing, and evaluation of software, security, telecommunications, or supervisory control, and data acquisition systems related projects and programs.

Minimum Experience: 5 years

Minimum Education Requirements: Associates Degree

Labor Category: Information Assurance III (IT Security Specialist) facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. Oversees the efforts of security staff to design, develop, engineer and implement solutions to security requirements. Responsible for the implementation and development of the DHS IT security.

Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs

7 | P a g e risk analyses which also includes risk assessment. Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. A working knowledge of several of the following areas is required: understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols;

encryption techniques/tools; familiarity with commercial products, and current Internet/EC technology. Ability to serve as Information System Security Officer. Provides daily

Five years experience in the application of information design, development, integration, analysis, operation, maintenance, testing, and evaluation of software, security, telecommunications, or supervisory control, and data acquisition systems related projects and programs.

Minimum Experience: 10 years

Minimum Education Requirements: Bachelors Degree

Labor Category: Program Manager II

Directs the performance of a variety of cyber security related projects, which may be organized by technology, program, or client. May be responsible for product delivery and financial management of client engagements. Performs independent quality assurance reviews of program performance and deliverables to ensure that contractual obligations are being met. Oversees the technology development and/or application, marketing, and resource allocation within program client base Organizes, directs, and manages contract operation support functions. Manages teams of contract support personnel at multiple locations. Maintains and manages the client interface at the senior levels of the client organization. Meets with customer and contractor personnel to formulate and review task plans and deliverable items. Ensures conformance with program task schedules and costs. Establishes and maintains technical and financial reports to show progress of projects to management and customers, organizes and delegates

8 | P a g e responsibilities to subordinates and oversees the successful completion of all assigned tasks.

At least five years of experience in a program management position overseeing an IT-oriented cyber security or related program. Must have at least Five (5) years of experience as a cyber security program manager supporting the Federal Government. Strong organizational skills. Strong leadership and management skills. Strong communication skills. Ability to work independently with minimal oversight

Minimum Experience: 5 years

Highly Desirable: PMP certification

Labor Category: Program Manager III

Directs the performance of a variety of cyber security related projects, which may be organized by technology, program, or client. Oversees the technology development and/or application, marketing, and resource allocation within program client base. Organizes, directs, and manages contract operation support functions. Manages teams of contract support personnel at multiple locations. Maintains and manages the client interface at the senior levels of the client organization. Meets with customer and contractor personnel to formulate and review task plans and deliverable items. Ensures conformance with program task schedules and costs.

Establishes and maintains technical and financial reports to show progress of projects to management and customers, organizes and delegates responsibilities to subordinates and oversees the successful completion of all assigned tasks.

At least ten years of experience in a program management position overseeing an IT-oriented cyber security or related program. Must have at least eight (8) years of experience as a program manager supporting the Federal Government. Strong organizational skills. Strong leadership and management skills.

Strong communication skills. Ability to work independently with minimal oversight

Minimum Experience: 10 years

Minimum Education Requirements: Master’s Degree

Highly Desirable: PMP certification

9 | P a g e

Labor Category: Project Manager III

Responsible for all aspects of the development and implementation of assigned cyber security projects and provides a single point of contact for those projects. Serves as the project manager for a large, complex task order (or a group of task orders affecting the same common/standard/migration system) and shall assist the Program Manager in working with the Government Contracting Officer (CO), the task order-level Task Managers (TM), Government management personnel and customer agency representatives. Under the guidance of the Program Manager, responsible for the overall management of the specific task order(s) and ensuring that the technical solutions and schedules in the task order are implemented in a timely manner. Interfaces with all areas affected by the project including end users, computer services, and client services.

Defines project scope and objectives. Develops detailed work plans, schedules, project estimates, resource plans, and status reports. Conducts project meetings and is responsible for project tracking and analysis. Ensures adherence to quality standards and reviews project deliverables. Manages the integration of vendor tasks and tracks and reviews vendor deliverables. Provides technical and analytical guidance to project team. Recommends and takes action to direct the analysis and solutions of problems. Performs enterprise wide horizontal integration planning and interfaces to other functional systems, including the development of conceptual systems requirements; systems integration requirements;

systems phasing plan; business application consultation;

problem tracking/management; and preparation and delivery of presentations.

Must have at least eight (8) years of project management experience with cyber security related projects supporting the Federal Government. Strong organizational skills. Strong leadership and management skills. Strong communication skills.

Ability to get multiple people/teams to work together towards a common goal. Ability to create and maintain schedules.

Ability to apply critical thinking skills to weigh pros and cons of multiple solutions to issues and provide recommendations to federal staff concerning project direction. Ability to work independently with minimal oversight.

Minimum Experience: 12 years

10 | P a g e

Highly Desirable: Industry standard IT security certifications (ex. Certified Systems Security Professional (CISSP), or an Information Technology Bachelor's degree. Industry standard project management certification (ex. Project Management Professional (PMP)).

Labor Category: Subject Matter Expert II

Develops requirements from a cyber security project's inception to its conclusion for a particular IT subject matter area (i.e., simple to complex systems). Assists other project members with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in the following specialties: information systems architecture; networking;

telecommunications; automation; communications protocols;

risk management/electronic analysis; software; life-cycle management; software development methodologies; modeling and simulation; disaster recovery; and requirements management.

Operational experience using applicable automated assessment tools. Experience in creating/reviewing documentation such as System Security Plans, Contingency Plans, Test Plans, Finding Matrices, and Network Diagrams. Strong oral/written communications and client facing skills.

Conducts automated and manual penetration tests of networks, applications, web applications, servers, endpoints, wireless, and mobile technologies. Experience in developing and implementing custom exploits. Broad experience in configuring and utilizing a wide range of automated tools to conduct penetration testing. Experience in analyzing results to mitigate the risk of false positives. Prepares findings reports depicting the cyber security posture of technologies along with recommendations to improve security measures.

Requires knowledge in fields defined as technical, such as electrical engineering, computer engineering, other engineering fields, scientific research, and other related technical and engineering fields.

Minimum Experience: 5 years

11 | P a g e

Highly Desirable: Bachelors Degree in a recognized technical, engineering, scientific, business, or other discipline related to area of expertise.

Labor Category: Subject Matter Expert III

Develops requirements from a cyber security project's inception to its conclusion for a particular IT subject matter area (i.e., penetration testing, RVA, cyber hunt, and incident response). Assists other project members with analysis and evaluation and with the preparation of recommendations for system security improvements, optimization, development, and/or maintenance efforts in the following specialties:

information systems architecture; networking;

telecommunications; automation; communications protocols;

risk management/ electronic analysis; software; life-cycle management; software development methodologies; modeling

System Security Plans, Contingency Plans, Test Plans, Finding wireless, and mobile technologies. Significant experience in developing and implementing custom exploits. Broad experience in configuring and utilizing a wide range of automated tools to conduct penetration testing. Significant experience in analyzing results to mitigate the risk of false positives. Prepares findings reports depicting the cyber security posture of technologies along with recommendations to improve security measures.

Must have at least ten (10) years of technical IT experience.

Such experience can come from system or network administration, security analysis, security testing and evaluation, security incident response, security monitoring, IT project implementation, or other similar technical activities.

Must have eight (8) years of experience pertaining to their area of expertise. This expertise must consist of research, design, implementation, and other experience with particular products within their subject areas. Fluent knowledge of NIST and FIPS

12 | P a g e security controls and how they apply within their area of expertise. Experience in creating/reviewing documentation such as Systems Security Plans and policies. Strong ability to work independently and with minimal guidance. Ability to interact with other personnel and to make recommendations as to how their area of expertise can be utilized by other IAD/OIT staff and projects. Strong oral/written communications and client facing skills. Ability to proficiently articulate technical concepts to a variety of technical and non-technical audiences using both written and verbal communications.

Minimum Experience: 10 years

Highly Desirable: CISSP (or equivalent), or an IT degree

Labor Category: Technical Writer III** (Documentation Specialist)

Gathers, analyzes, translates and composes technical information into clear, readable documents to be used by technical and non-technical personnel for cyber security projects. Composes technical documents related to cyber security projects. Conducts research and ensures the use of proper technical terminology in cyber security reports related to penetration testing, RVA, cyber hunt, and incident response.

Must have at least three (5) years of experience as a technical writer. Must have exceptional ability to write clearly, concisely, and precisely. Experienced accepting information from a variety of formats and generating clear and concise documentation from that information. Strong ability to write documents to satisfy a variety of audiences from "worker level" to upper management, and to those individuals with or without technical knowledge. Expert with MS Office, MS Excel, MS PowerPoint, Adobe Acrobat, and other document-creating software as identified by client. Understanding of cyber security activities related to penetration testing, RVA, cyber hunt, and incident response. Ability to work independently as well as with moderate oversight.

Minimum Experience: 8 years

Highly Desirable:

13 | P a g e

Labor Category: Test Engineer III

Performs formal system testing activities for a particular project or subset of a larger project under supervision of more experienced test personnel. Performs analysis of documented user requirements and directs or assists in the design of test plans in support of user requirements for moderately complex to complex software or IT systems. May participate in all phases of risk management assessment and software/hardware development. Responsible for ensuring that the test design and documentation support all applicable clients, agency or industry standards time lines and budgets.

Responsible for ensuring that testing conclusions and recommendations are fully supported by test results, and project managers are fully informed of testing status and application deviations from documented user requirements.

Must have five (5) years of experience performing security testing of IT systems. Must be capable of providing specific evidence to support security findings presented to IT system stakeholders. This includes being able to support such evidence if refuted by system stakeholders, as well as being able to identify valid points of contention and alternate mitigation/remediation implementations. Operational experience using applicable automated assessment tools. Must be capable of performing security assessments and penetration testing with minimal use of automated tools, in order to supplement and validate findings from automated security tools. Ability to develop custom scripts or tools for assessing or exploiting vulnerabilities. Experience in creating/reviewing documentation such as System Security Plans, Contingency Plans, Test Plans, Finding Matrices, and Network Diagrams.

Ability to work independently within a team environment.

Fluent knowledge of NIST and FIPS security controls. Strong oral/written communication and client facing skills.

Minimum Experience: 8 years

14 | P a g e

For all labor categories, experience and education may be substituted for one another towards the satisfaction of labor category requirements. An overview of this substitution is included below:

Degree Required Years of Experience Credited

A.A 2

B.A. / B.S. 4

M.A. / M.S. 6

Ph.D / J.D. / M.D. 8

Additionally, attainment of professional certifications or licenses in the field of performance may be substituted for one (1) year of professional experience or as one (1) year of educational credit (i.e., two

(2) certifications equate to and A.A., four (4) certifications to a B.A, etc.).

LABOR CATEGORY DESCRIPTIONS SIN 54151S

Commercial Job Title:

Analyst II

As part of a team, contributes analysis, guidance, and insight into the scientific, business, or technical discipline under evaluation. Serves as a scientific, business, or technical resource on a task. Under general supervision, formulates and defines systems scope and objectives through research and fact-finding combined with an understanding of applicable business systems and industry requirements. With this knowledge, develops or modifies moderately complex information systems. Includes analysis of business and user needs, documenting requirements, and revising existing system logic difficulties as necessary. Guides and advises less-experienced Business Systems Analysts. Competent to work in some phases of systems analysis and considers the business implications of the application of technology to the current business environment.

Applicable knowledge and familiarity in functional areas which may include systems engineering, systems security, quality assurance, test and evaluation, reliability and maintainability, configuration and data information systems, and support.

Minimum Experience: 2 years

15 | P a g e

Minimum Education Requirements: Bachelors

Highly Desirable: MA/MS/BA/BS/AA in a scientific, business, or technical discipline. In case of no degree, some college education and/or specialized training/ certification is required.

Computer Systems Analyst IV

Computer Systems Analyst - Analyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend commercially available software. Analyzes information requirements; Evaluates analytically and systematically problems of workflows, organization, planning, and develops appropriate corrective action. Helps develop plans for automated information systems from project inception to conclusion. Defines the problem and develops system requirements and program specifications. Under supervision, coordinates closely with programmers or engineers to ensure proper implementation of program and system specifications;

Develops system alternative solutions in conjunction with functional users.

Understanding of systems analysis. Experience in the development of system changes and upgrades.

Minimum Experience: 10 years

Configuration Management Specialist II

Analyzes proposed changes of product design to determine effect on overall product and system. Coordinates modification records for management control. Establishes change orders and prepares for change authorization and documentation by company and subcontractor. Prepares reports of change effect on overall product. Reviews and analyzes released engineering change data and coordinates changes with engineering, quality, 16 | P a g e support, manufacturing, and engineering data control activities.

Ensures that customer requirements are implemented and reviews change accounting activity to ensure compliance with configuration management policies.

Five years Project Specialist experience with a BA/BS.

Minimum Education Requirements: Bachelors degree

Highly Desirable: BS in an engineering, scientific, or technical discipline.

Engineering Support Analyst I

Analysis of either chemical, civil, electrical or mechanical engineering systems or data. Project and analytical support, database development and content, graphics and web page design, document development and content, outreach administration, IT support, procedures development, data analysis, technology research, project management, etc.

Requires a Bachelors degree and 10 years of experience of which a minimum of 5 years of experience must involve analysis of either chemical, civil, electrical or mechanical engineering systems or data. Must have detailed experience with one or more phases of the systems engineering life cycle and thorough knowledge of all phases of the systems engineering life cycle.

Minimum Experience: 10 years

Functional Analyst

Requires a Bachelors degree with 10 years experience of which a minimum of 4 years must be specialized in systems design and analysis, functional requirements analysis, or modeling. Functional Analysts apply their strong analytical and technical skills to assist in implementing business solutions. Functional Analysts are directed to exercise core skills on projects, or they may direct small teams. Functional

17 | P a g e

Analysts are qualified to perform tasks such as: Document an organization’s current business process flows Design

Functional Analysts possess at least 5 year of experience in information systems implementation, change management efforts, or business process redesign. Functional Responsibility:

Functional Analysts apply their strong analytical and technical skills to assist in implementing business solutions. Functional Analysts are directed

Minimum Experience: 10 years

Information Technologist

Assists with the operation of the secure data center computer systems, networks, and/or applications. These consist of computing architectures running on mainframes, minis, and micros. Responsibilities for this position will be to perform entry level functions and to assist in one or more of the following: Continuously monitors all component equipment and take appropriate corrective action to ensure operational readiness; Provides assistance to users in accessing and using systems. Works with users to define and formulate application requirements; Performs basic applications systems analysis and programming; Provides entry level support in the design, code, test, debug, and documentation of applications systems.

Requires a Bachelors degree in computer science, engineering, mathematics, or equivalent with 3 years experience of which a minimum of 1 year must be specialized in the design, integration, or operation of advanced information technology systems.

Minimum Experience: 3 years

Information Assurance II

Description: Provides support to plan, coordinate, and implement the

18 | P a g e facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. Oversees the efforts of security staff to design, develop, engineer and implement solutions to security requirements. Responsible for the implementation and development of the DHS IT security.

Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. A working knowledge of several of the following areas is required: understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols;

encryption techniques/tools; familiarity with commercial products, and current Internet/EC technology. Ability to serve as Information System Security Officer. Provides daily

Two years experience in the application of information design, development, integration, analysis, operation, maintenance, testing, and evaluation of software, security, telecommunications, or supervisory control, and data acquisition systems related projects and programs.

Minimum Experience: 5 years

Highly Desirable: Knowledge of FISMA ; CISSP certification

Information Assurance III facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. Oversees the efforts of security staff to design, develop, engineer and implement solutions to security requirements. Responsible for the implementation and development of the DHS IT security.

19 | P a g e

Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the MLS arena. Performs risk analyses which also includes risk assessment. Provides support to plan, coordinate, and implement the organization’s information security. Provides support for facilitating and helping agencies identify their current security infrastructure and define future programs, design and implementation of security related to IT systems. A working knowledge of several of the following areas is required: understanding of business security practices and procedures; knowledge of current security tools available; hardware/software security implementation; different communication protocols;

encryption techniques/tools; familiarity with commercial products, and current Internet/EC technology. Ability to serve as Information System Security Officer. Provides daily

Five years experience in the application of information design, development, integration, analysis, operation, maintenance, testing, and evaluation of software, security, telecommunications, or supervisory control, and data acquisition systems related projects and programs.

Minimum Experience: 10 years

Highly Desirable: Knowledge of FISMA ; CISSP certification

IT Subject Matter Expert II

Develops requirements from a project's inception to its conclusion for a particular IT subject matter area (i.e., simple to complex systems). Assists other project members with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in the following specialties: information systems architecture; networking; telecommunications;

automation; communications protocols; risk management/electronic analysis; software; life-cycle management; software development methodologies; modeling

20 | P a g e

System Security Plans, Contingency Plans, Test Plans, Finding wireless, and mobile technologies. Experience in developing and implementing custom exploits. Broad experience in configuring and utilizing a wide range of automated tools to conduct penetration testing. Experience in analyzing results to mitigate the risk of false positives. Prepares findings reports depicting the cyber security posture of technologies along with recommendations to improve security measures.

Requires knowledge in fields defined as technical, such as electrical engineering, computer engineering, other engineering fields, scientific research, and other related technical and engineering fields.

Minimum Experience: 5 years

Minimum Education Requirements: Bachelors Degree

Highly Desirable: Bachelors Degree in a recognized technical, engineering, scientific, business, or other discipline related to area of expertise.

IT Subject Matter Expert III

Develops requirements from a project's inception to its conclusion for a particular IT subject matter area (i.e., simple to complex systems). Assists other project members with analysis and evaluation and with the preparation of recommendations for system improvements, optimization, development, and/or maintenance efforts in the following specialties: information systems architecture; networking; telecommunications;

automation; communications protocols; risk management/ electronic analysis; software; life-cycle management; software development methodologies; modeling and simulation; disaster recovery; and requirements management.

21 | P a g e

System Security Plans, Contingency Plans, Test Plans, Finding wireless, and mobile technologies. Significant experience in developing and implementing custom exploits. Broad experience in configuring and utilizing a wide range of automated tools to conduct penetration testing. Significant experience in analyzing results to mitigate the risk of false positives. Prepares findings reports depicting the cyber security posture of technologies along with recommendations to improve security measures.

Must have at least ten (10) years of technical IT experience.

Such experience can come from system or network administration, security analysis, security testing and evaluation, security incident response, security monitoring, IT project implementation, or other similar technical activities.

Must have five (5) years of experience pertaining to their area of expertise. This expertise must consist of research, design, implementation, and other experience with particular products within their subject areas. Fluent knowledge of NIST and FIPS security controls and how they apply within their area of expertise. Experience in creating/reviewing documentation such as Systems Security Plans and policies. Strong ability to work independently and with minimal guidance. Ability to interact with other personnel and to make recommendations as to how their area of expertise can be utilized by other IAD/OIT staff and projects. Strong oral/written communications and client facing skills. Ability to proficiently articulate technical concepts to a variety of technical and non-technical audiences using both written and verbal communications.

Minimum Experience: 10 years

Highly Desirable: CISSP (or equivalent), or an IT degree

22 | P a g e

Commercial Job Title: Manager VI

Has responsibility for managing IT projects containing the technical disciplines required to perform the program. Manages IT staff and others performing the most complex, challenging, or strategically important IT project activities. Duties may also include ensuring IT project/task adheres to work standards, assigning schedules, reviewing work, supervising contractor personnel and communicating policies, procedures and goals of the organization to personnel. May manage a diverse group of functional IT-related activities, as well as subordinate groups of technical and administrative personnel. Responsible for the contract performance.

Has demonstrated information technology expertise and communications skills to be able to interface with all levels of management. Establishes and alters (as necessary) management structure to effectively direct program/technical support activities.

Minimum Experience: 14 years

Commercial Job Title: Principal Technologist

Provides high level functional and systems analysis, design, integration, documentation, and implementation advice on exceptionally complex studies which require expert knowledge of the subject matter for effective problem solution. Could participate in all phases of study development with emphasis on the planning, analysis, documentation, and presentation phases. Duties may include overseeing the design and preparation of technical reports and related documentation.

Requires a Bachelors degree in engineering, physics, science, or related technical discipline and 20 years of experience of which a minimum of 10 years must involve the analysis, development or deployment of advanced technologies within a multidisciplinary systems environment. In addition, requires at least 5 years of experience in managing technology programs.

Minimum Experience: 20 years

23 | P a g e

Commercial Job Title: Program Director

Organizes, directs, and coordinates planning and production of all contract support activities for IT services. Demonstrate communications skills at all levels of management. Serve as the contractor’s authorized interface with the Contracting Officer’s Technical Representative (COTR), government management personnel, and client agency representatives for IT-related Task Orders. Demonstrate the technical expertise in a variety of IT services in order to formulate and enforce work standards, assign contractor schedules, review work discrepancies, supervise contractor personnel, and communicate policies, purposes, and goals of the organization to subordinate personnel. Under stringent time frames, assembles and recruits as necessary to perform assigned tasks. Demonstrate capability in the overall management of multi‐task IT-related contracts of the size, type, and complexity as described in Task Order for IT-related services.

Knowledge, Skills and Abilities: Requires a Bachelors degree and 13 years of progressively more responsible experience in IT systems support and management.

Minimum Experience: 13 years

Minimum Education Requirements: Bachelors degree; CISSP certification

Commercial Job Title: Project Engineer III

Responsible as a team lead for specific tasks relating to the implementation, configuration, integration, testing and deployment of information technology products and solutions.

Project Engineer IV is involved in a managing role as a team lead during the analysis and capture of project requirements, leads a team of engineers in development of the solution design, supports development and implementation planning, testing and documentation. Project Engineer IV has Senior level skills relating to the technologies or programming languages used in the delivery of the project. Minimum

Knowledge, Skills and Abilities: Has senior level skills relating to the technologies or programming languages used in the delivery of the project.

Minimum Experience: 10 years

24 | P a g e

Commercial Job Title: Project Specialist

Provides programmatic support to the Program, Project, or Task Manager on one or more projects or tasks. Responsible for supporting specific tasks relating to the implementation, configuration, integration, testing and deployment of information technology products and solutions. Involved in a support role to conduct the analysis and capture project requirements, contribute to the solution design, support development and implementation planning, testing and documentation.

Knowledge, Skills and Abilities: Has junior level skills relating to the technologies or programming languages used in the delivery of the project.

Minimum Experience: 3 years

Commercial Job Title: Senior Business Specialist

Provides technical and administrative support in the development of studies, analyses, and reports. Performs specialized research and technical writing tasks. Performs basic analysis to identify potential general solutions and lines of research for project tasks. Provides documentation and other management expertise in the development of technical reports and business documentation. Studies and analyzes current advances in the management practices and technical documentation and uses this information to formulate, implement, document, and evaluate processes, practice, systems, programs, or technology.

Requires a Bachelor’s degree and 12 years of experience in performing business operations analysis, program control, or contract administration for government or commercial programs.

Minimum Experience: 12 years

25 | P a g e

Commercial Job Title: Sr. Info Technologist

Maintains smooth operation of multi-user computer systems, including coordination with network administrators. Duties may include setting up administrator and service accounts, maintaining system documentation, tuning system performance, installing system wide software and allocate mass storage space. Interacts with users and evaluates vendor products. Makes recommendations to purchase hardware and software, coordinates installation and provides backup recovery. Develops and monitors policies and standards for allocation related to the use of computing resources. Provides support to an enterprise management system. Performs monitoring and management of mainframes, networks and workgroup servers.

Requires a Bachelors degree in computer science, engineering, mathematics, or equivalent with 7 years experience of which a minimum of 3 years must be specialized in the design, integration, or operation of advanced information technology systems.

Minimum Experience: 7 years

Commercial Job Title: Sr. Sys Dev Engineer

Provides expertise in one or more engineering disciplines such as: electronic engineering, communications engineering, information engineering, network engineering, security, interoperability analysis, system standards, military operations (ground, sea, and air), program analysis, requirements analysis, program planning, cost analysis.

Requires a Bachelors degree and 7 years experience applying an organization-wide set of disciplines for the planning, analysis, design, and construction of systems on a system-wide basis or across a major sector of the enterprise.

Minimum Experience: 7 years

26 | P a g e

Commercial Job Title: Systems Technologist I

Provides support to an enterprise management system.

Performs monitoring and management of mainframes, networks and workgroup servers. Supports solutions for ingesting, processing and disseminating large-scale data sets using highly parallelized big data analytic solutions for deployment in cloud environments. This includes geoprocessing (computer vision) capabilities that support the detection, identification, characterization and contextualization of objects and facilities including change detection, object classification, motion indication, behavior modeling, 3D model creation and processing, to support Earth Observation products and services based on data sources including EO/IR, SAR, HSI/MSI, LiDAR, MI, WAMI, GMTI, and OPIR.

Requires a Bachelors degree in engineering, physics, mathematics, computer science or related technical discipline and 17 years of experience of which a minimum of 10 years must involve the analysis, development or deployment of advanced technologies within a multidisciplinary systems environment.

Minimum Experience: 17 years

Commercial Job Title: Technical Analyst II

Duties include reviewing, analyzing, or documenting organization’s business process, requirements or system flows. May design, code and test functional components of information systems according to project specifications.

Could identify and document functional requirements for information systems. May develop project documentation and/or user training materials according to program specifications. Could conduct user training sessions as well as prepare communication plans.

Relevant experience includes, but is not limited to, knowledge of analytical techniques, experience in gathering data to solve complex technical problems (e.g., requirements definition, operations research, modeling), and team leader responsibilities.

27 | P a g e

Commercial Job Title: Technical Analyst III

Duties include reviewing, analyzing, or documenting organization’s business process, requirements or system flows.

May design, code and test functional components of information systems according to project specifications. Could identify and document functional requirements for information systems. May develop project documentation and/or user training materials according to program specifications. Could conduct user training sessions as well as prepare communication plans. Responsibilities could also include producing database extracts, as well as providing technical support to software development teams. Performs program, management support tasks, such as status reporting and work plan maintenance. May supervise team members in achieving required results.

Relevant experience includes, but is not limited to, knowledge of analytical techniques, experience in gathering data to solve complex technical problems (e.g., requirements definition, operations research, modeling), and team leader responsibilities.

Minimum Experience: 10 years

Degree Required Years of Experience Credited

A.A 2

B.A. / B.S. 4

M.A. / M.S. 6

Ph.D / J.D. / M.D. 8

Additionally, attainment of professional certifications or licenses in the field of performance may be substituted for one (1) year of professional experience or as one (1) year of educational credit (i.e., two

(2) certifications equate to and A.A., four (4) certifications to a B.A, etc.).