MAS - Redtrace Technologies Inc. - 47QTCA20D00E2

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

Federal Supply Group: Information Technology

Contract Number: 47QTCA20D00E2

For more information on ordering go to the following website: https://www.gsa.gov/schedules.

Contract Period: August 13, 2020, through August 12, 2025

Contractor: REDTRACE TECHNOLOGIES, INC.

4512 Cedar Reach Ln.

Bowie, MD 20720 Telephone: 202-573-8433 Web Site: http://www.RedTraceTech.com E-mail: kelo.makelele@redtracetech.com Contract Administration: Ekelo Makelele Business Size: SBA 8(a) Certified Program Participant, Small Business, Service-Disabled Veteran Owned Small Business, SBA Certified Small Disadvantaged Business, & SBA Certified HUBZone Firm

Pricelist current as of modification #PS-0006 effective November 14, 2023

Prices Shown Herein are Net (discount deducted)

CUSTOMER INFORMATION:

1a. Table of Awarded Special Item Number(s) with appropriate cross-reference to item descriptions and page numbers:

SIN SIN Recovery SIN Description 54151S 54151S-RC Information Technology Professional Services 54151HACS 54151HACS-RC Highly Adaptive Cybersecurity (HACS) OLM OLM-RC Order Level Materials

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. Not Applicable

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility, and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Labor Category Descriptions Below

2. Maximum Order:

SINs Maximum Order 54151S $500,000

54151HACS $500,000

OLM $250,000

3. Minimum Order: $100.00

4. Geographic Coverage (delivery Area): Domestic only

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted). See Attachment.

7. Quantity discounts: 1% for orders $400K+

8. Prompt payment terms: 1% 10, Net 30. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for concessions.

9. Foreign items (list items by country of origin): None

10a. Time of Delivery (Contractor insert number of days): TBD for ordering agency

10b. Expedited Delivery. The Contractor will insert the sentence “Items available for expedited delivery are noted in this price list.” under this heading. The Contractor may use a symbol of its choosing to highlight items in its price list that have expedited delivery: TBD for ordering agency

10c. Overnight and 2-day delivery. The Contractor will indicate whether overnight and 2-day delivery are available. Also, the Contractor will indicate that the schedule customer may contact the Contractor for rates for overnight and 2-day delivery: TBD for ordering agency

10d. Urgent Requirements. The Contractor will note in its price list the “Urgent Requirements” clause of its contract and advise agencies that they can also contact the Contractor’s representative to effect a faster delivery: TBD for ordering agency

11. F.O.B Points(s): Destination

12a. Ordering Address(es): Same as Contractor

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3

13. Payment address(es): Same as company address

14. Warranty provision.: Contractor’s standard commercial warranty.

15. Export Packing Charges (if applicable): N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable): N/A

17. Terms and conditions of installation (if applicable): N/A

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

18b. Terms and conditions for any other services (if applicable): N/A

19. List of service and distribution points (if applicable): N/A

20. List of participating dealers (if applicable): N/A

21. Preventive maintenance (if applicable): N/A

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). N/A

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g. contractor’s website or other location.) ICT accessibility can be found at https:

www.Section508.gov/. N/A

23. Unique Entity Identifier (UEI): DR16ALLER8R5

24. Notification regarding registration in System for Award Management (SAM) database. Registered

The rates shown below include the Industrial Funding Fee (IFF) of 0.75%.

Labor Category Year 1

GSA Price Including

IFF

Year 2 GSA Price Including

IFF

Year 3 GSA Price

Year 4

Year 5

Cyber Security Architect Engineer Senior

$130.29 $133.54 $136.88 $140.30 $143.81

Cyber Security Architect/Engineer Staff

$115.26 $118.15 $121.10 $124.12 $127.22

Cyber Security Operations Analyst Senior

$125.28 $128.41 $131.63 $134.92 $138.30

Information/Security Engineer Associate

$105.24 $107.87 $110.57 $113.33 $116.16

Threat Intelligence $115.26 $118.15 $121.10 $124.12 $127.22

Computer Exploitation Engineer $108.99 $111.71

Computer Network Operations Analyst (CNO Analyst)

$81.96 $84.01

Cyber Security Operations Analyst

$130.93 $134.21

Incident Response Analyst $128.36 $131.58

Information System Security Engineer

$125.04 $128.16

Information System Security Officer

$111.39 $114.17

Service Contract Act: RedTrace Technology confirms the Service Contract Labor Standards (SCLS), formerly the Service Contract Act (SCA), apply to this contract as it applies to the entire Multiple Award Schedule and all services provided. While no specific labor categories/services have been identified as being subject to SCLS due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CFR 541.300), this contract still maintains the provisions and protections for SCLS eligible labor categories. If and / or when the contractor adds SCLS labor categories / employees to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

Labor Category Descriptions

Cyber Security Architect Engineer Senior:

Minimum/ General Experience: Eight (8) years of Experience

Functional Responsibility: Execute the highly technical, tactical elements of the Security Architects’ (and overall CISS) cyber security strategy, eliminating a functional cyber security capability gap while providing pro-active cyber security risk management. The CSE will also assist with vulnerability mitigation, incident remediation, and will help manage change requests in support of cyber vulnerability remediation efforts. The CSE will ensure the implementation of system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation, and will perform security reviews to identify gaps in security architecture. The CSE will assist in the development of appropriate security risk management plans.

Career level with a complete understanding and wide application of technical principles, theories, and concepts. Working under only general direction, provides technical solutions to a wide range of difficult problems.

Independently determines and develops approach to solutions.

Education: Bachelor’s Degree

Cyber Security Architect/Engineer Staff:

Minimum/ General Experience: Two (2) Years of Experience

Functional Responsibility: Experienced with frequent use and application of technical standards, principles, and theories. Designs and builds relational databases. Develops strategies for data acquisitions, archive recovery, and implementation of a database. As a Cybersecurity Architect on identifying and ensuring business requirements for cybersecurity are met; improving the security architecture capability, metrics and measures, developing and utilizing design patterns and reference architectures 5 completing security architecture risk reviews as part of the third party risk management and risk assessment processes , participating in mergers and acquisitions due diligence and integration processes and evaluate and track relevant emerging technologies, Works under general supervision, providing solutions to technical problems of moderate scope/complexity.

Minimum Education: Bachelor’s Degree

Cyber Security Operations Analyst Senior

Minimum/ General Experience: Six (6) Years of Experience

Functional Responsibility: Experience of sixteen or more years in cyber security or IT system application/application development, design and implementation, business process reengineering, IT transformation, or other related services. Serves as a Subject Matter Specialist on projects related to an area of relevant cybersecurity such as penetration testing, incident detection and response, risk and vulnerability assessments, threat mitigation, cyber threat hunting or related field.

Career level with a complete understanding and wide application of technical principles, theories, and concepts. Working under only general direction, prove technical solutions to a wide range of difficult problems. Independently determines and develops approach to solutions.

Minimum Education: Bachelor’s Degree

Information/Security Engineer Associate

Minimum/General Experience: Two (2) Years of Experience

Functional Responsibility: Ensures that all information systems are functional and secure. Determines enterprise information security standards. Participate as a security engineering representative on engineering teams for the design, development, implementation, and/or integration of secure networking, computing, and enclave environments. Participate as a security engineering representative on engineering teams for the design, development, implementation, and/or integration of IA architectures, systems, or system components. Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of secure networking, computing, and enclave environments. Participate as the primary security engineering representative on engineering teams for the design, development, implementation, evaluation, and/or integration of IA architectures, systems, or system components.

Support the government in the enforcement of the design and implementation of trusted relationships among externals systems and architectures. Apply knowledge of IA policy, procedures, and workforce structure to design, develop, and implement secure networking, computing, and enclave environments. Support security planning, assessment, risk analysis, and risk management. Identify overall security requirements for the proper handling of Government data.

Interact with the customer and other project team members. Perform system or network designs that encompass multiple enclaves, to include those with differing data protection/classification requirements, Provide security planning, assessment, risk analysis, and risk management.

Recommend system-level solutions to resolve security requirements. Support the Government in the enforcement of the design and implementation of trusted relationships among external systems and architectures

Threat Intelligence

Minimum Experience: Five (5) Years of Experience

Functional Responsibility: Collect information about internet-based-malware related criminal activities and the people behind them. Make predictions about cyber criminals and their future activities based on what is already known about them. Skills include Network and/or operating system security, computer network intrusion detection/prevention systems, firewalls, IT network-based attack methodologies and tools, Security operations and incident response technologies and methodologies.

Minimum Education: Associates Degree

Computer Exploitation Engineer

Minimum Experience: Three (3) Years of Experience

Functional Responsibility: Assess computer network defense and information assurance in support of customer organizations. Provide certified and experienced vulnerability assessment analysts to conduct off-site system vulnerability, network architecture, policy and procedure, application, and system integrity reviews. Assist with the development and maintenance of red team detachment assessment methods, tools, and techniques.

Computer Network Operations Analyst (CNO Analyst)

Minimum Experience: Three (3) Years of Experience

Functional Responsibility: Perform code review in order to find vulnerabilities. Perform protocol and input fuzzing in order to find vulnerabilities. Perform analysis of disassembled code when source code is unavailable. Develop exploits based on identified vulnerabilities. Recommend fixes and mitigation for identified vulnerabilities. Create/maintain adversary emulation toolsets/development. Document tools, techniques, processes, and procedures.

Minimum Education: Bachelor’s Degree

Cyber Security Operations Analyst

Minimum Experience: Five (5) Years of Experience Functional Responsibility: Search for vulnerabilities and risks in hardware and software. Implement and monitor security measures for communication systems, and networks, and provide advice that systems and personnel adhere to established security standards and Governmental requirements for security on these systems. Develop and execute Government approved security policies, plans, and procedures; implement data network security measures; operate Network Intrusion Detection and Forensics; and handle IS security incidents Minimum Education: Bachelor's Degree

Incident Response Analyst

Minimum Experience: Three (3) Years of Experience

Functional Responsibility: Incident Response analyst with experience conducting advanced analysis of all relevant artifacts associated with a potential intrusion, such as network traffic to determine the initial infection vector (IIV) as well as any impact a cybersecurity event may have incurred.

Minimum Education: Bachelor's Degree

Information System Security Engineer

Minimum Experience: Eight (8) Years of Experience

Functional Responsibility: Services to support Information System Engineering performed by the Information System Security Engineering (ISSE) at a minimum shall consist of the following activities:

Design, develop, and implement network security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation. Design, develop and implement specific cybersecurity countermeasures for the IS and Network environment.

Minimum Education: Bachelor’s Degree

Information System Security Officer

Minimum Experience: Five (5) Years of Experience

Functional Responsibility: Services to support Information Security (IS) performed by the Information Security Officer (ISSO) at a minimum, shall consist of the following activities: Conduct required IS vulnerability scans according to risk assessment parameters. Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each IS. Provide liaison support between he system owner and other IS security personnel. Ensure that selected controls are implemented and operating as intended during all phases of the IS cycle.

Minimum Education: Bachelor's Degree