MAS - Iron Vine Security LLC - 47QTCA19D00HF

GENERAL SERVICES ADMINISTRATION

FEDERAL ACQUISITION SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE (FSS) PRICE LIST

Online access to contract ordering information, terms and conditions, pricing, and the option to create an electronic delivery order are available through GSA Advantage!®. The website for GSA Advantage!® is:

https://www.GSAAdvantage.gov.

MULTIPLE AWARD SCHEDULE (MAS)

FSC GROUP: INFORMATION TECHNOLOGY CATEGORY

FSC CLASS: DA01, DJ01

Iron Vine Security LLC

1400 I Street NW, Suite 925 Washington, DC 20005-6566 Telephone: (202) 803-7014

Fax: (202) 318-8425 www.ivsec.com

POC for Contract Administration: Laura Childers, laura.childers@ecstech.com

Contract Number: 47QTCA19D00HF For more information on ordering, go to the following website: https://www.gsa.gov/schedules.

Contract Period: August 13, 2019 – August 12, 2029

Business Size / Status: Other Than Small Business

Pricelist current through modification PO-0010, effective August 13, 2024 https://www.gsaadvantage.gov/ http://www.ecstech.com/ mailto:laura.childers@ecstech.com https://www.gsa.gov/schedules

47QTCA19D00HF Page i

TABLE OF CONTENTS

CUSTOMER INFORMATION

CONTRACT OVERVIEW

CONTRACT ADMINISTRATOR

CONTRACT USE

CONTRACT SCOPE

LABOR CATEGORY DESCRIPTIONS

HOURLY RATES FOR SERVICES

INSTRUCTIONS FOR PLACING ORDERS FOR SERVICES BASED ON GSA SCHEDULE HOURLY RATES . 21

BLANKET PURCHASE AGREEMENT

USA COMMITMENT TO PROMOTE SMALL BUSINESS PARTICIPATION PROCUREMENT PROGRAMS

BEST VALUE BLANKET PURCHASE AGREEMENT FEDERAL SUPPLY SCHEDULE

BASIC GUIDELINES FOR USING “CONTRACTOR TEAM ARRANGEMENTS”

47QTCA19D00HF Page 1

CUSTOMER INFORMATION

1a. Table of Awarded Special Item Numbers (SINs):

Please refer to GSA eLibrary (www.gsaelibrary.gsa.gov) for detailed SIN descriptions

SIN 54151HACS / 54151HACS RC / 54151HACS STLOC, Highly Adaptive Cybersecurity Services

(HACS)

SIN 54151S / 54151S RC / 54151S STLOC, Information Technology Professional Services

SIN OLM / OLM RC / OLM STLOC, Order Level Materials (OLM)

1b. Lowest Priced Model Number and Lowest Price: Please refer to our rates starting on page #19

1c. Labor Category Descriptions: Please refer to page #4

2. Maximum Order: SINs 54151HACS and 54151S: $ 500,000.00

SIN OLM: $ 250,000

Note: Agencies may place, and contractor may honor, orders exceeding this limit in accordance with FAR 8.404

3. Minimum Order: $ 100.00

4. Geographic Coverage: Domestic delivery only

5. Point of Production: United States

6. Discount from List Price: All prices herein are net

7. Quantity Discounts: None offered

8. Prompt Payment Terms: Net 30 days.

Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign Items: None offered

10a. Time of Delivery: As negotiated with Ordering Agency

10b. Expedited Delivery: Items available for expedited delivery are noted in this pricelist.

10c. Overnight and 2-Day Delivery: Ordering activity may contact the Contractor for rates for overnight and two-day delivery.

10d. Urgent Requirement: Ordering agencies can request accelerated delivery for urgent requirements.

11. F.O.B. Point(s): Destination

12a. Ordering Address: Iron Vine Security LLC

Attn: GSA Orders 1400 I Street NW, Suite 925 Washington, DC 20005 Phone: (202) 803-7014

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment Address: Iron Vine Security LLC

Attn: Accounts Receivable 1400 I Street NW, Suite 925 Washington, DC 20005 Phone: (202) 803-7014

14. Warranty Provision: Not applicable http://www.gsaelibrary.gsa.gov/

47QTCA19D00HF Page 2

15. Export Packing Charges: Not applicable

16. Terms and conditions of rental, maintenance, and repair:

Not applicable

17. Terms and conditions of installation (if applicable): Not applicable

18a. Terms and conditions of repair parts indicating date of parts, price lists and any discounts from list prices:

Not applicable

18b. Terms and conditions for any other services (if applicable):

19. List of service and distribution points (if applicable): Not applicable

20. List of participating dealers (if applicable): Not applicable

21. Preventative maintenance (if applicable) Not applicable

22a. Special attributes such as environmental attributes

(e.g., recycled content, energy efficiency, and/or reduced pollutants.):

Not applicable

22b. Section 508 compliance information is available on Information and Communications Technology (ICT) supplies and services and show where full details can be found (e.g. contractor’s website or other location.)

The ICT standards can be found at:

www.Section508.gov/

23. Unique Entity Identifier (UEI) Number: UL2BFA85ME72

24. Iron Vine Security LLC is registered in the System for Award Management (SAM).

http://www.section508.gov/

47QTCA19D00HF Page 3

CONTRACT OVERVIEW

GSA awarded Iron Vine Security LLC GSA Multiple Award Schedule (MAS) contract number 47QTCA19D00HF.

The contract is currently in the base period with a period of performance of August 13, 2019 – August 12, 2024.

GSA may exercise three five-year option periods. The contract allows for the placement of Firm Fixed Price or Time and Materials task orders using the labor categories and ceiling rates defined in the contract.

CONTRACT ADMINISTRATOR

Laura Childers, GSA Schedules Contracts Administrator 2750 Prosperity Avenue, Suite 600 Fairfax, VA 22031 Telephone: (571) 232-1412 Email: laura.childers@ecstech.com

CONTRACT USE

This contract is available for use by all federal government agencies. Executive agencies, other federal agencies, mixed-ownership government corporations, and the District of Columbia; government contractors authorized in writing by a federal agency pursuant to 48 CFR 51.1; and other activities and organizations authorized by statute or regulation to use GSA as a source of supply may use this contract. Additionally, contractors are encouraged to accept orders received from activities within the Executive Branch of the Federal Government.

CONTRACT SCOPE

Services specified in a task order may be performed at the contractor’s facilities or the ordering agencies’ facilities. The government will determine the contractor’s compensation by any of several different methods (to be specified at the task order level) e.g., a firm-fixed price for services with or without incentives, labor hours or time-and-material.

The Special Item Numbers (SINs) available under this contract provide services across the full life cycle of a project. When task orders are placed, they must identify the SIN or SINs under which the task is being executed.

Iron Vine Security LLC has been awarded a contract by GSA to provide services under the following SINs:

• 54151HACS, Highly Adaptive Cybersecurity Services (HACS)

• 54151S, Information Technology Professional Services

• OLM, Order Level Materials

A full description of each SIN and examples of the types of work covered by the SIN are available on GSA eLibrary.

47QTCA19D00HF Page 4

LABOR CATEGORY DESCRIPTIONS

Iron Vine Security reserves the right to make the following substitutions in the education and/or experience requirements of any of the service skill categories set forth herein.

1. One year of experience is the equivalent of one year of education.

2. One year of education is the equivalent of one year of experience.

3. Certification related to the technology is equivalent to two years of experience or education requirement.

Enterprise Architect

Functional Responsibility: Provides high level architectural expertise to managers and technical staff. Develops architectural products and deliverables for the enterprise and operational business lines. Develops strategy of system and the design infrastructure necessary to support that strategy. Advises on selection of technological purchases with regards to processing, data storage, data access, and applications development. Sets standards for the client/server relational database structure for the organization (SQL, ORACLE, SYBASE, etc.). Advises of feasibility of potential future projects to management.

Minimum/General Experience: 3 years of experience in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, or related discipline to work requirement

Enterprise Resource Planning (ERP) Business/Architectural Specialist

Functional Responsibility: Adapts functional business requirements and processes to technical solutions based upon comprehensive enterprise application solution sets. Enterprise resource planning and management processes, including but not limited to: knowledge management, investment analysis, data warehousing, e-commerce, return on investment analysis, human resource analysis, material management and logistics, supply chain management, procurement, ordering, manufacturing, decision support, and information dissemination.

Minimum/General Experience: 10 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Business/Econ, or related discipline to work requirement

Information Assurance/Security Specialist III

Functional Responsibility: Determines enterprise information assurance and security standards. Develops and implements information assurance/security standards and procedures. Coordinates, develops, and evaluates security programs for an organization. Recommends information assurance/security solutions to support customers’ requirements. Identifies, reports, and resolves security violations. Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Supports customers at the highest levels in the development and implementation of doctrine and policies. Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures. Performs analysis, design, and development of security features for system architectures. Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers. Designs, develops, engineers, and implements solutions that meet security requirements. Provides integration and implementation of the computer system security solution. Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle. Ensures that all information systems are functional and secure.

Minimum/General Experience: 2 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Information Security/IA, or related discipline to work requirement

Information Assurance/Security Specialist IV

Functional Responsibility: Determines enterprise information assurance and security standards. Develops and implements information assurance/security standards and procedures. Coordinates, develops, and evaluates security programs for an organization. Recommends information assurance/security solutions to support customers’ requirements. Identifies, reports, and resolves security violations. Establishes and satisfies information

47QTCA19D00HF Page 5 assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Supports customers at the highest levels in the development and implementation of doctrine and policies. Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures. Performs analysis, design, and development of security features for system architectures. Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers. Designs, develops, engineers, and implements solutions that meet security requirements. Provides integration and implementation of the computer system security solution. Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle. Ensures that all information systems are functional and secure.

Minimum/General Experience: 5 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Information Security/IA, or

Master Network Specialist

Functional Responsibility: Provides technical guidance for directing and monitoring information systems operations. Designs, builds, and implements network systems. Directs compilation of records and reports concerning network operations and maintenance. Troubleshoots network performance issues. Analyzes network traffic and provides capacity planning solutions. Monitors and responds to complex technical control facility hardware and software problems. Interfaces with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance. Manages the purchase, testing, installation, and support of network communications, including LAN/MAN/WAN systems. Performs system-level design and configuration of products including determination of hardware, OS, and other platform specifications. Plans large-scale systems projects through vendor comparison and cost studies. Performs a variety of systems engineering tasks and activities that are broad in nature and are concerned with major systems design, integration, and implementation, including personnel, hardware, software, budgetary, and support facilities and/or equipment.

Provides quality assurance review and the evaluation of new and existing software products. Provides assistance and oversight for all information systems operations activities, including computer and telecommunications/ communications operations, data entry, data control, LAN/MAN/WAN administration and operations support, operating systems programming, system security policy procedures, and/or web strategy and operations.

Provides input to policy level discussions regarding standards and budget constraints. Supervises all personnel engaged in the operation and support of network facilities, including all communications equipment on various platforms in large scale or multi-shift operations. Supervises complex operations that involve two or more additional functions such as, but not limited to, network operations, systems security, systems software support, and production support activities. Monitors and responds to hardware, software, and network problems. Provides the routine testing and analysis of all elements of the network facilities (including power, software, communications machinery, lines, modems, and terminals). Utilizes software and hardware tools and identifies and diagnoses complex problems and factors affecting network performance. Troubleshoots network systems when necessary and makes improvements to the network.

Minimum/General Experience: 5 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Networking, or related

Senior Network Specialist

Functional Responsibility: Provides technical guidance for directing and monitoring information systems operations. Designs, builds, and implements network systems. Directs compilation of records and reports concerning network operations and maintenance. Troubleshoots network performance issues. Analyzes network traffic and provides capacity planning solutions. Monitors and responds to complex technical control facility hardware and software problems. Interfaces with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance. Manages the purchase, testing, installation, and support of network communications, including LAN/MAN/WAN systems. Performs system-level design and configuration of products including determination of hardware, OS, and other platform specifications. Plans large-scale systems projects through vendor comparison and cost studies. Performs a variety of systems engineering tasks and activities that are broad in nature and are concerned with major systems design, integration, and implementation, including personnel, hardware, software, budgetary, and support facilities and/or equipment.

Provides quality assurance review and the evaluation of new and existing software products. Provides assistance

47QTCA19D00HF Page 6 and oversight for all information systems operations activities, including computer and telecommunications/ communications operations, data entry, data control, LAN/MAN/WAN administration and operations support, operating systems programming, system security policy procedures, and/or web strategy and operations.

Provides input to policy level discussions regarding standards and budget constraints. May supervise personnel engaged in the operation and support of network facilities, including all communications equipment on various platforms in large scale or multi-shift operations. May supervise complex operations that involve two or more additional functions such as, but not limited to, network operations, systems security, systems software support, and production support activities. Monitors and responds to hardware, software, and network problems. Provides the routine testing and analysis of all elements of the network facilities (including power, software, communications machinery, lines, modems, and terminals). Utilizes software and hardware tools and identifies and diagnoses complex problems and factors affecting network performance. Troubleshoots network systems when necessary and makes improvements to the network.

Minimum/General Experience: 4 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Networking, or related

Security Consultant III

Functional Responsibility: Leads team on large projects or significant segment of large complex projects.

Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools, and solution components. Provides applications systems analysis and programming activities for a Government site, facility, or multiple locations. Prepares long and short-range plans for application selection, systems development, systems maintenance, and production activities and for necessary support resources. Oversees all aspects of projects.

Minimum/General Experience: 5 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Business/Econ, Information Security/IA, or related discipline to work requirement

Security Consultant IV

Functional Responsibility: Leads team on large projects or significant segment of large complex projects.

Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools, and solution components. Provides applications systems analysis and programming activities for a Government site, facility, or multiple locations. Prepares long- and short-range plans for application selection, systems development, systems maintenance, and production activities and for necessary support resources. Oversees all aspects of projects.

Minimum/General Experience: 8 years in related field

Security Operations Center (SOC) Analyst III

Functional Responsibility: Utilize COTS tools to analyze network and security event data. Identify and validate potential security threats. Initiate incident response procedures and ensure proper communication channels are established. Server as incident handler, managing entire incident response life cycle from detection to post-response analysis and identification of lessons learned. Conduct thorough technical analysis of acquired disk, memory, or executable binary samples. Gather and disseminate threat information to other analysts and organizational stakeholders. Assist in the identification and proliferation of IT security enhancements that will serve to better protect the customer’s enterprise environment.

Skills: Effective communication skills and demonstrated use of proper business etiquette. Strong understanding of TCP/IP networking at all layers. Awareness of, and experience in the identification of current-day cyber threats.

Experience handling and acting upon classified, unclassified, and open-source cyber threat information.

Familiarity with COTS security event, host, and traffic analysis tools. Proficient with open-source tools and techniques used in disk and memory acquisition and analysis. Experience with both dynamic and static malware analysis. Knowledge of incident response and reporting requirements as they apply to the civilian federal government. Proficiency in common scripting languages such as Python, JavaScript, and Perl.

Minimum/General Experience: 5 years in related field

47QTCA19D00HF Page 7

Information Security Analyst - Sr

Functional Responsibility: Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Minimum/General Experience: 4 years in related field

Information Security Analyst - SME

Functional Responsibility: Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information. May ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure. May respond to computer security breaches and viruses.

Minimum/General Experience: 8 years in related field

Information Engineer III

Functional Responsibility: Serves as subject matter expert, possessing in-depth knowledge of a particular area, such as business, computer science, engineering, mathematics, or the various sciences. Provides technical knowledge and analysis of highly specialized applications and operational environments, high-level functional systems analysis, design, integration, documentation, and implementation advice on exceptionally complex problems that need extensive knowledge of the subject matter for effective implementation. Participates as needed in all phases of software development with emphasis on the planning, analysis, testing, integration, documentation, and presentation phases. Applies principles, methods, and knowledge of the functional area of capability to specific task order requirements, advanced mathematical principles and methods to exceptionally difficult and narrowly defined technical problems in engineering and other scientific applications to arrive at automated solutions.

Minimum/General Experience: 4 years in related field

Information Engineer IV

Functional Responsibility: Serves as subject matter expert, possessing in-depth knowledge of a particular area, such as business, computer science, engineering, mathematics, or the various sciences. Provides technical knowledge and analysis of highly specialized applications and operational environments, high-level functional systems analysis, design, integration, documentation, and implementation advice on exceptionally complex problems that need extensive knowledge of the subject matter for effective implementation. Participates as needed in all phases of software development with emphasis on the planning, analysis, testing, integration, documentation, and presentation phases. Applies principles, methods, and knowledge of the functional area of capability to specific task order requirements, advanced mathematical principles and methods to exceptionally difficult and narrowly defined technical problems in engineering and other scientific applications to arrive at automated solutions.

Minimum/General Experience: 6 years in related field

Security Subject Matter Expert

Functional Responsibility: Serves as subject matter expert, possessing in-depth knowledge of information system security. Provides technical knowledge and analysis of highly specialized applications and operational environments, high-level functional systems analysis, design, integration, documentation, and implementation

47QTCA19D00HF Page 8 advice on exceptionally complex problems that need extensive knowledge of the subject matter for effective implementation. Participates as needed in all phases of the information security life cycle. Applies principles, methods, and knowledge of the functional area of capability to specific task order requirements, advanced security principles and methods to exceptionally difficult and narrowly defined technical problems in security engineering and other security applications to arrive at automated solutions.

Minimum/General Experience: 6 years in related field

Subject Matter Expert (Journeyman)

Functional Responsibility: Performs work in support of systems development and implementation. Activities include gathering requirements, assisting in parts of system design, architecture, documentation, and training.

Provides functional subject matter expertise in areas such as PKI, Network Security, Information Assurance, Systems Administration, Programming, and Data Center Operations.

Minimum/General Experience: 1 year in related field

Analyst IV

Functional Responsibility: Participates in building and managing information systems and security policy development. This analyst has some engineering responsibilities and operations duties. Responsibilities vary from project to project but include the following: assist in the design, deployment, and management of systems, management software, and reporting software; assist in the administration of Linux and Windows Server systems;

manage sensors: tuning, updates, and installation; assist with technical and computer usage policy development;

respond to incidents and conduct remediation.

Minimum/General Experience: Ten (10) years working in the information security field

Minimum Education: Bachelor's degree

Information Security Engineer 2

Functional Responsibility: Provides technical expertise in multilevel security. Gathers and organizes technical information about an organization's mission goals and needs, existing security products, and ongoing programs in the multilevel security arena. Also designs, develops, engineers, and implements solutions to multilevel security requirements and is responsible for the implementation and development of multilevel security. Reports orally and in writing to the Program Manager, Project Manager, contractor management, and government representatives.

Minimum/General Experience: Three (3) years working in the information security field

Information Security Engineer 3

Functional Responsibility: Defines security requirements for high-level applications, networks, and systems in adherence to security plans, OMB regulatory directives, and Federal Government information security policy. This engineer can also perform security awareness training. Work varies from project to project but includes the following: gathers and organizes technical information on an organization's mission and goals as they relate to existing and future security needs; designs, develops, engineers, and implements solutions necessary to ensure the safety of information system assets; installs, configures, and maintains the security infrastructure (RSA servers, Firewalls, IDS, VPN); provides in-depth knowledge of various security tools such as Public Key Infrastructure; educates the user community to ensure their understanding and adherence to policies and procedures to ensure security standards; and responds to auditors regarding compliance with security plans, policy, and procedures.

Minimum/General Experience: Five (5) years working in the information security field

47QTCA19D00HF Page 9

Information Security Engineer 4

Functional Responsibility: Defines security requirements for high-level applications, networks, and systems in adherence to security plans, OMB regulatory directives, and Federal Government information security policy. Can also perform security awareness training. Work varies from project to project but includes the following: gathers and organizes technical information on an organization's mission and goals as they relate to existing and future security needs; designs, develops, engineers, and implements solutions necessary to ensure the safety of information system assets; installs, configures, and maintains the security infrastructure; provides in-depth knowledge of various security tools; educates the user community to ensure their understanding and adherence to policies and procedures to ensure security standards; and responds to auditors regarding compliance with security plans, policy, and procedures.

Minimum/General Experience: Eight (8) years working in the information security field

IT Program Manager

Functional Responsibility: Responsible for managing the day-to-day operations of the program and overall coordination, status reporting, and stability of complex and cross-functional IT project-oriented work efforts.

Develops the program strategy, supporting business case, and various program plans. Ensures integration of project and adjusts scope, timing, and budget as needed. Establishes and implements IT program management processes and methodologies to ensure all projects are delivered on time, within budget, adhere to high quality standards, and meet customer expectations.

Responsible for tracking key project milestones and adjusting program plans and/or resources. Delivers presentations and leads client meetings.

Minimum/General Experience: Ten (10) years’ work-related experience

Minimum Education: Bachelor’s Degree

IT Senior Program Manager

Functional Responsibility: Responsible for overall IT program management from inception to delivery and ensures that projects are implemented, developed, and delivered in a timely and fiscally responsible manner.

Provides functional and technical leadership to engineering staff and guidance to management. Establishes metrics and ensures that quality assurance practices are implemented with regard to overall contracts. Develops and implements program improvement plans. Performs enterprise wide horizontal integration planning and interfaces to other functional systems. Serves as the primary point of contact for Government Contracting Officer (CO), Contracting Officers Representative (COR), the Contracting Officers Technical Representative (COTR), Government management personnel, and customer agency representatives.

Minimum/General Experience: Fifteen (15) years’ work-related experience

IT SME Program Manager

Functional Responsibility: Responsible for technical performance, cost, and schedule of projects and subtasks.

Organizes, directs, and coordinates planning, execution, and evaluation of all IT project/technical support activities. Interfaces with customer representatives and management. Provides direction, establishes IT project management structure, develops work breakdown structures, allocates resources, and develops and maintains project schedules.

IT Senior Project Manager

Functional Responsibility: Responsible for technical performance, cost, and schedule of projects and subtasks.

Organizes, directs, and coordinates planning, execution, and evaluation of all IT project/technical support activities. Interfaces with customer representatives and management. Provides direction, establishes IT project management structure, develops work breakdown structures, allocates resources, and develops and maintains project schedules.

Minimum/General Experience: Ten (10) years related experience

47QTCA19D00HF Page 10

Subject Matter Expert II

Functional Responsibility: Provides expert, independent services and leadership in specialized functional or technical areas on an as-needed basis. Coordinates with contractor management and customer personnel at all levels to ensure that the problem is properly understood and defined, and that the solution satisfies the client’s requirements. Designs, organizes, leads, and conducts executive level workshops, benchmarking, and surveys.

Minimum/General Experience: Eight (8) years related experience in field of expertise

Subject Matter Expert III

Functional Responsibility: Defines problems and analyzes and develops plans and requirements in the subject matter area for complex systems as defined in individual delivery orders. Provides expert, independent services and leadership in specialized functional or technical areas on an as-needed basis. Prepares analysis, evaluations, and recommends corrective implementation.

Minimum/General Experience: Thirteen (13) years related experience in field of expertise

Subject Matter Expert IV

Functional Responsibility: Provides extensive, expert knowledge of technical/engineering applications in the information technology (IT) specialty area with the ability to provide complete technical solutions. Independently performs tasks of the highest degree of complexity and difficulty. Analyzes technical risk, schedule, and cost impacts of approaches. Establishes performance and technical standards. Generates and approves project and testing specifications. Provides technical guidance to other project team members. Can supervise other technical personnel. Results of work are technically authoritative. Develops and recommends organizational process changes to include new solutions and new technology. Excellent communication and problem-solving skills.

Minimum/General Experience: Seventeen (17) years related experience in field of expertise

Subject Matter Expert V

Functional Responsibility: Provides extensive, expert knowledge of technical/engineering applications with the ability to provide complete technical solutions independently and perform tasks of the highest degree of complexity and difficulty. Analyzes technical risk, schedule, and cost impacts of approaches. Establishes performance and technical standards. Generates and approves project and testing specifications. Provides technical guidance to other project team members. Can supervise other technical personnel. Results of work are technically authoritative. Develops and recommends organizational process changes to include new solutions and new technology. Excellent communication and problem-solving skills.

Minimum/General Experience: Twenty (20) years related experience in field of expertise

Computer Systems Analyst - Sr

Functional Responsibility: Analyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend commercially available software.

Minimum/General Experience: Five (5) years related experience in field of expertise

Computer Systems Analyst - SME

Functional Responsibility: Analyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or

47QTCA19D00HF Page 11 improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend commercially available software.

Computer Systems Engineer/Architect - SME

Functional Responsibility: Design and develop solutions to complex applications problems, system administration issues, or network concerns. Perform systems management and integration functions.

Cyber Enterprise Architect

Functional Responsibility: Provides high level architectural expertise to managers and technical staff. Develops Cybersecurity and IT architectural products and deliverables for the enterprise and operational business lines.

Develops strategy of system and the design infrastructure necessary to support that strategy. Advises on selection of cybersecurity and IT technological purchases with regards to processing, data storage, data access, and applications development. Sets standards for the client/server relational database structure for the organization (SQL, ORACLE, SYBASE, etc.). Advises of feasibility of potential future projects to management.

Minimum/General Experience: 3 years of experience in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, or related discipline to work requirement

Cyber Enterprise Resource Planning (ERP) Business/Architectural Specialist

Functional Responsibility: Adapts functional business requirements and processes to technical solutions based upon comprehensive enterprise application solution sets. Manages risk and develops cybersecurity controls and systems. Enterprise resource planning and management processes, including but not limited to: knowledge management, investment analysis, data warehousing, e-commerce, return on investment analysis, human resource analysis, material management and logistics, supply chain management, procurement, ordering, manufacturing, decision support, and information dissemination.

Minimum/General Experience: 10 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Business/Econ, or related

Cyber Information Assurance/Security Specialist III

Functional Responsibility: Determines enterprise information assurance and security standards. Develops and implements information assurance/security standards and procedures. Coordinates, develops, and evaluates security programs for an organization. Recommends information assurance/security solutions to support customers’ requirements. Identifies, reports, and resolves security violations. Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Supports customers at the highest levels in the development and implementation of doctrine and policies. Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures. Performs analysis, design, and development of security features for system architectures. Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers. Designs, develops, engineers, and implements solutions that meet security requirements. Provides integration and implementation of the computer system security solution. Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle. Ensures that all information systems are functional and secure.

Minimum/General Experience: 2 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Information Security/IA, or

47QTCA19D00HF Page 12

Cyber Information Assurance/Security Specialist IV

Functional Responsibility: Determines enterprise information assurance and security standards. Develops and implements information assurance/security standards and procedures. Coordinates, develops, and evaluates security programs for an organization. Recommends information assurance/security solutions to support customers’ requirements. Identifies, reports, and resolves security violations. Establishes and satisfies information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands.

Supports customers at the highest levels in the development and implementation of doctrine and policies. Applies know-how to government and commercial common user systems, as well as to dedicated special purpose systems requiring specialized security features and procedures. Performs analysis, design, and development of security features for system architectures. Analyzes and defines security requirements for computer systems which may include mainframes, workstations, and personal computers. Designs, develops, engineers, and implements solutions that meet security requirements. Provides integration and implementation of the computer system security solution. Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems. Performs vulnerability/risk analyses of computer systems and applications during all phases of the system development life cycle. Ensures that all information systems are functional and secure.

Minimum/General Experience: 5 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Information Security/IA, or

Cyber Master Network Specialist

Functional Responsibility: Provides technical guidance for directing and monitoring cybersecurity information systems operations. Designs, builds, and implements network systems. Directs compilation of records and reports concerning network operations and maintenance. Troubleshoots network performance issues. Analyzes network traffic and provides capacity planning solutions for Cybersecurity systems. Monitors and responds to complex technical control facility hardware and software problems. Interfaces with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance. Manages the purchase, testing, installation, and support of network communications, including LAN/MAN/WAN systems, firewalls, intrusion detections systems and end-point security solutions. Performs system-level design and configuration of products including determination of hardware, OS, and other platform specifications. Plans large-scale systems cybersecurity projects through vendor comparison and cost studies. Performs a variety of systems engineering tasks and activities that are broad in nature and are concerned with major systems design, integration, and implementation, including personnel, hardware, software, budgetary, and support facilities and/or equipment.

Provides quality assurance review and the evaluation of new and existing software products. Provides assistance and oversight for all information systems operations activities, including computer and telecommunications/ communications operations, data entry, data control, LAN/MAN/WAN, firewalls, intrusion detections systems and end-point security solutions, administration and operations support, operating systems programming, system security policy procedures, and/or web strategy and operations. Provides input to policy level discussions regarding standards and budget constraints. Supervises all personnel engaged in the operation and support of network facilities, including all communications equipment on various platforms in large scale or multi-shift operations. Supervises complex operations that involve two or more additional functions such as, but not limited to, network operations, systems security, systems software support, and production support activities. Monitors and responds to hardware, software, and network problems. Provides the routine testing and analysis of all elements of the network facilities (including power, software, communications machinery, lines, modems, and terminals, firewalls, intrusion detections systems and end-point security solutions, etc.). Utilizes software and hardware tools and identifies and diagnoses complex problems and factors affecting network performance.

Troubleshoots network systems when necessary and makes improvements to the network.

Minimum/General Experience: 5 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Networking, or related

Cyber Senior Network Specialist

Functional Responsibility: Provides technical guidance for directing and monitoring Cybersecurity information systems operations. Designs, builds, and implements network systems and Cybersecurity solutions. Directs compilation of records and reports concerning network operations and maintenance. Troubleshoots network performance issues. Analyzes network traffic and provides capacity planning solutions. Analyzes network Cybersecurity events. Monitors and responds to complex technical control facility hardware and software

47QTCA19D00HF Page 13 problems. Interfaces with vendor support service groups to ensure proper escalation during outages or periods of degraded system performance. Manages the purchase, testing, installation, and support of network communications, including LAN/MAN/WAN systems, firewalls, intrusion detections systems and end-point security solutions, etc. Performs system-level design and configuration of products including determination of hardware, OS, and other platform specifications. Plans large-scale systems projects through vendor comparison and cost studies. Performs a variety of systems engineering tasks and activities that are broad in nature and are concerned with major systems design, integration, and implementation, including personnel, hardware, software, budgetary, and support facilities and/or equipment. Provides quality assurance review and the evaluation of new and existing software products. Provides assistance and oversight for all information systems operations activities, including computer and telecommunications/communications operations, data entry, data control, LAN/MAN/WAN administration and operations support, operating systems programming, system security policy procedures, and/or web strategy and operations. Provides input to policy level discussions regarding standards and budget constraints. May supervise personnel engaged in the operation and support of network facilities, including all communications equipment on various platforms in large scale or multi-shift operations. May supervise complex operations that involve two or more additional functions such as, but not limited to, Cybersecurity network operations, systems security, systems software support, and production support activities.

Monitors and responds to hardware, software, and network problems. Provides the routine testing and analysis of all elements of the network facilities (including power, software, communications machinery, lines, modems, and terminals). Utilizes software and hardware tools and identifies and diagnoses complex problems and factors affecting network performance. Troubleshoots network systems when necessary and makes improvements to the network.

Minimum/General Experience: 4 years in related field

Minimum Education: Bachelor’s degree in Computer Science’s, MIS/IT, Engineering, Networking, or related

Cyber Security Consultant III

Functional Responsibility: Leads team on large projects or significant segment of large complex Cybersecurity and IT projects. Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools, risk management, and solution components. Provides applications systems analysis and programming activities for a Government site, facility, or multiple locations.

Prepares long and short-range plans for Cybersecurity application selection, systems development, systems maintenance, and production activities and for necessary support resources. Oversees all aspects of projects.

Minimum/General Experience: 5 years in related field

Cyber Security Consultant IV

Functional Responsibility: Leads team on large cyber projects or significant segment of large complex projects.

Analyzes new and complex project related problems and creates innovative cyber solutions involving finance, scheduling, technology, methodology, tools, and solution components. Provides applications systems analysis and programming activities for a Government site, facility, or multiple locations. Prepares long- and short-range plans for application selection, systems development, systems maintenance, and production activities and for necessary support resources. Oversees all aspects of cyber projects.

Minimum/General Experience: 8 years in related field

Cyber Security Operations Center (SOC) Analyst III

Functional Responsibility: Utilize COTS tools to analyze network and security event data. Identify and validate potential security threats. Initiate incident response procedures and ensure proper communication channels are established. Server as incident handler, managing entire incident response life cycle from detection to post-response analysis and identification of lessons learned. Conduct thorough technical analysis of acquired disk, memory, or executable binary samples. Gather and disseminate threat information to other analysts and organizational stakeholders. Assist in the identification and proliferation of IT security enhancements that will serve to better protect the customer’s enterprise environment.

47QTCA19D00HF Page 14

Skills: Effective communication skills and demonstrated use of proper business etiquette. Strong understanding of TCP/IP networking at all layers. Awareness of, and experience in the identification of current-day cyber threats.

Experience handling and acting upon classified, unclassified, and open-source cyber threat information.

Familiarity with COTS security event, host, and traffic analysis tools. Proficient with open-source tools and techniques used in disk and memory acquisition and analysis. Experience with both dynamic and static malware analysis. Knowledge of incident response and reporting requirements as they apply to the civilian federal government. Proficiency in common scripting languages such as Python, JavaScript, and Perl.

Minimum/General Experience: 5+ years in related field

Cyber Information Security Analyst - Sr

Functional Responsibility: Plan, implement, upgrade, or monitor cybersecurity measures for the protection of computer networks and information.