MAS - Koniag Data Solutions LLC - 47QTCA23D005D

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class: IT Services

Contract number: 47QTCA23D005D

Contract period: March 1, 2023 through February 29, 2028

Koniag Data Solutions, LLC 3800 Centerpoint Drive, Suite 700

Anchorage, AK 99503 Phone: 703.488.9300

Fax: 703.488.3499 www.koniag-gs.com

Contract Administrator: Steven Kutscher

Email: skutscher@koniag-gs.com

Business size: Small, Disadvantaged, 8(a) business

For more information on ordering on ordering go to the following website:

https://www.gsa.gov/schedules.

Price List is current through Modification PS-0006, effective May 28, 2024.

Prices Shown Herein are Net (discount deducted)

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs Recovery SIN Title 54151S 54151S/STLOC/RC Information Technology Professional Services 54151HACS 54151HACS/STLOC/RC Highly Adaptive Cybersecurity Services (HACS) OLM OLM/STLOC/RC Order-Level Materials (OLM’s)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See below.

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See below.

2. Maximum order: $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic delivery only

5. Point(s) of production (city, county, and State or foreign country).

4100 Lafayette Center Drive, Suite 303, Chantilly, VA 20151 3800 Centerpoint Drive, Suite 700, Anchorage, AK 99503

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. 2% over $500,000

8. Prompt payment terms. Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Specified on Task Order

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

12a. Ordering address(es). 4100 Lafayette Center Drive, Suite 303, Chantilly, VA 20151

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es). 4100 Lafayette Center Drive, Suite 303, Chantilly, VA 20151

14. Warranty provision. Contractor’s standard commercial warranty.

15. Export packing charges. Not Applicable

16. Terms and conditions of rental, maintenance, and repair. Not Applicable

17. Terms and conditions of installation. Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices. Not Applicable

18b. Terms and conditions for any other services. Not Applicable

19. List of service and distribution points. Not Applicable

20. List of participating dealers. Not Applicable

21. Preventive maintenance. Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g.

contractor’s website or other location.) ICT accessibility standards can be found at:

https://www.Section508.gov/.

Koniag Data Solutions is a services company and provides 508 assessment and compliance services to the Federal Government today. Any and all information and communications technology (ICT) products and services provided to our government customers would include a VPAT Accessibility Conformance Report formally documenting 508 compliance of all products delivered for review and acceptance. For more information, please visit our website, www.koniag-gs.com.

23. Unique Entity Identifier (UEI) number. N19BZQQSEUV4

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

GSA Pricing

SIN LABOR CATEGORY Year 2 Year 3 Year 4 Year 5

54151S Program Manager $148.02 $153.94 $160.10 $166.51 54151S Quality Control Manager $120.84 $125.67 $130.70 $135.93 54151S Help Desk IV $120.84 $125.67 $130.70 $135.93 54151S Functional Manager III $148.02 $153.94 $160.10 $166.51 54151S Help Desk V $148.02 $153.94 $160.10 $166.51 54151S Network Systems I $148.02 $153.94 $160.10 $166.51 54151S Task Master III $120.84 $125.67 $130.70 $135.93 54151S Network Administrator IV $112.60 $117.11 $121.79 $126.67 54151S Administrative Assistant I** $71.05 $73.89 $76.85 $79.92

54151HACS Cyber Admin Assistant II $99.09 $103.05 $107.17 $111.46 54151HACS Cyber Capability Enhancement SME I $103.72 $107.87 $112.18 $116.66 54151HACS Cyber Capability Enhancement SME II $154.01 $160.16 $166.57 $173.23 54151HACS Cyber Capability Enhancement SME III $172.42 $179.32 $186.50 $193.95 54151HACS Cyber Database Administrator I $109.89 $114.29 $118.86 $123.62 54151HACS Cyber Dev Team Lead/Developer I $101.80 $105.87 $110.11 $114.51 54151HACS Cyber Governance, Risk & Compliance SME I $127.17 $132.26 $137.55 $143.05 54151HACS Cyber Governance, Risk & Compliance SME II $134.94 $140.34 $145.95 $151.79 54151HACS Cyber Governance, Risk & Compliance SME III $154.01 $160.16 $166.57 $173.23

54151HACS

Cyber Incident Management Forensics Surge Support SME II

$134.94 $140.34 $145.95 $151.79

54151HACS

Cyber Incident Management Forensics Surge Support SME III

$154.01 $160.16 $166.57 $173.23

54151HACS

Cyber Incident Management / Forensics FOIA

SME II

$115.67 $120.29 $125.11 $130.12

54151HACS Cyber Incident Management / Forensics SME I $127.17 $132.26 $137.55 $143.05 54151HACS Cyber Incident Management / Forensics SME II $134.94 $140.34 $145.95 $151.79 54151HACS Cyber Incident Management / Forensics SME III $154.01 $160.16 $166.57 $173.23 54151HACS Cyber Infrastructure Specialist, Lead $263.48 $274.02 $284.98 $296.37 54151HACS Cyber IT Business Process Engineer III $134.94 $140.34 $145.95 $151.79 54151HACS Cyber Network & Systems Security SME II $134.94 $140.34 $145.95 $151.79 54151HACS Cyber Network & Systems Security SME III $154.01 $160.16 $166.57 $173.23 54151HACS Cyber Network & Systems Security SME IV $160.56 $166.98 $173.66 $180.60 54151HACS Cyber Network & Systems Security SME V $172.42 $179.32 $186.50 $193.95 54151HACS Cyber Network Security Engineer, Lead $263.48 $274.02 $284.98 $296.37 54151HACS Cyber Privacy SME I $127.17 $132.26 $137.55 $143.05

SIN LABOR CATEGORY Year 2 Year 3 Year 4 Year 5

54151HACS Cyber Privacy SME II $134.94 $140.34 $145.95 $151.79 54151HACS Cyber Privacy SME III $154.01 $160.16 $166.57 $173.23 54151HACS Cyber Program Manager I $193.45 $201.19 $209.24 $217.61 54151HACS Cyber Program Manager II $201.32 $209.37 $217.74 $226.45 54151HACS Cyber Program Manager V $258.96 $269.32 $280.09 $291.29 54151HACS Cyber Project Manager III $167.41 $174.11 $181.07 $188.31 54151HACS Cyber Section 508 - SME I $103.72 $107.87 $112.18 $116.66

54151HACS

Cyber Security Training & Technical Writing & 508 Compliance Tech Writing - Tech Writer I

$78.21 $81.33 $84.58 $87.97

54151HACS

Cyber Security Training & Technical Writing & 508 Compliance Tech Writing - Tech Writer II

$103.72 $107.87 $112.18 $116.66

54151HACS Cyber Systems Security Analyst I $129.72 $134.91 $140.31 $145.92 54151HACS Cyber Systems Security Analyst II $138.12 $143.64 $149.38 $155.36 54151HACS Cyber Systems Security Analyst III $157.08 $163.37 $169.90 $176.71 54151HACS Cyber Training Specialist I $82.33 $85.62 $89.05 $92.61 54151HACS Cyber Web Developer I $98.12 $102.05 $106.13 $110.37

54151HACS

Cybersecurity Compliance and Report Card Improvements SME I

$127.17 $132.26 $137.55 $143.05

54151HACS

Cybersecurity Compliance and Report Card Improvements SME III

$154.01 $160.16 $166.57 $173.23

Service Contract Labor Standards

Contract Labor Category SCLS Equivalent Code – Title WD Number Administrative Assistant I 01020-Administrative Assistant 2015-4281 The Service Contract Labor Standards, formerly the Service Contract Act (SCA), apply to this contract and it includes SCLS applicable labor categories. Labor categories and fixed price services marked with a (**) in this pricelist are based on the U.S. Department of Labor Wage Determination Number(s) identified in the SCLS/SCA matrix. The prices awarded are in line with the geographic scope of the contract (i.e., nationwide).

Labor Category Descriptions

Labor Category

Functional Responsibilities Minimum Education

Minimum Years of

Experience

Program Manager

Responsible for the successful technical, schedule, and cost performance of a major program, or multiple programs, through subordinate program/project managers, in accordance with contract requirements and company policies, procedures and guidelines. Acquires follow-on business associated with areas of responsibility and supports new business development by leading major proposals personally, or through subordinate program/project managers.

Manages a directorate within a division. Has supervisory and developmental responsibilities within a functional area. The program director manages one or more projects or programs, may manage an operating office, and supervises professional and technical personnel performing in their customary disciplines.

Maintains aggressive efforts to achieve objectives. Acts as a technical liaison with vendors. Trains and supervises personnel. Assists in proposal process and coordinates with Pricing Department when required. Responsible for all phases of the program budget. Performs analysis for contract reviews with various software. Develops Quality Assurance Programs for all products and services.

Prepare Staffing Plans, including skill and labor mix, to support contract operations. May be responsible for recruiting, interviewing, and hiring staff.

Assign staff and provide technical direction as necessary to complete task.

Monitor contract, subcontract, and funding; prepare forecasts of program financial performance. Develop and deliver required contract, departmental, project and/or financial reports. Determines candidates for employment/termination, conducts performance evaluations and salary reviews for assigned staff and is responsible for the application of company policies. At least 4 years in a supervisory capacity. Bachelors 8

Quality Control Manager

Responsible for the effective management and/or day-to-day supervision of QA engineering and/or inspection. Establishes and maintains quality assurance programs, procedures, and controls ensuring that performance and quality of products conform to established corporate and industry standards. Works directly with developers and testers to conduct continuing inspections and audits of IT systems and to enforce requirements as specified by customers and/or regulatory agencies. Establishes and executes inspections prior to the processing; monitors housekeeping best practices, analyzes errors for significant findings and conclusions; Works with research and development during new product start-ups and establishes key checkpoints for new products and processes. Advises management of test trends, bugs, performance and audit results and corrective action needed. Bachelors 6

Help Desk IV

Provides Tier I and II technical software, hardware and network problem resolution for clients by performing problem diagnosis and guiding users through step-by-step solutions or may provide expertise to solve first and second tier technical support issues for end-users of the organization's products and services.

Uses automated information systems to analyze routine situations. Reviews incoming requests, both computer generated and verbal, sort, code and may prioritize for proper action. Resolves problems or contacts more senior technical Bachelors 6

Functional Responsibilities Minimum Education

Minimum Years of

Experience support as necessary. Supports users by fulfilling individual requests for information and/or training in the utilization of the various databases available.

Conducts technical research for source of information required in support of request for information related to ongoing programs and proposal efforts.

Maintains network diagrams and circuit records. Instructs users in the use of PCs and networks. May perform basic PC, PBX, and network software programming.

Interacts with other team members, such as network services, software engineering, and/or applications development to restore services and/or identify and correct the core problem.

Functional Manager III

Has responsibility for managing multiple related departments such as Tier I, Tier II, and Tier III technical software, hardware and network customer support or other task-dependent IT departments. Selects and hires candidates for management positions within departments and conducts performance evaluations and salary reviews for assigned staff. Is responsible for the development of departmental policies and procedures within the department. At least 3 years progressively responsible management positions. Bachelors 8

Help Desk V

Provides Tier I and II technical software, hardware and network problem resolution for clients by performing problem diagnosis and guiding users through step-by-step solutions or may provide expertise to solve first and second tier technical support issues for end-users of the organization's products and services.

Uses automated information systems to analyze routine situations. Reviews incoming requests, both computer generated and verbal, sort, code and may prioritize for proper action. Resolves problems or contacts more senior technical support as necessary. Supports users by fulfilling individual requests for information and/or training in the utilization of the various databases available.

Conducts technical research for source of information required in support of request for information related to ongoing programs and proposal efforts.

Maintains network diagrams and circuit records. Instructs users in the use of PCs and networks. May perform basic PC, PBX, and network software programming.

Interacts with other team members, such as network services, software engineering, and/or applications development to restore services and/or identify and correct the core problem. Has extensive knowledge of the IT field. Works on assignments that are moderately difficult, requiring judgment in resolving issues or in making recommendations. Uses judgment within limits of standard practice. Only asks for supervision for unusual cases. Errors identified could affect other operating groups. May have day to day work coordination of others. Bachelors 8

Network Systems I

Provides technical and operation support in the installation for network, LANs/WANs and telecommunications equipment and systems. May perform work at client site. Conducts various surveys such as electronic/electrical, mechanical and environment systems, space and weight, maintainability, and logistic support to determine the feasibility of installations. Provides technical support to end users and maintains overall functionality of and other networks.

Activates/deactivates network lines according to established schedules. Performs first- and/or second-level problem determination (first level is help desk).

Interfaces with users and/or network vendors. Tests and analyzes elements of network facilities (power, communication machinery, software lines, modems, and terminals). Monitors systems and advises senior members of network staff Bachelors 8

Functional Responsibilities Minimum Education

Minimum Years of

Experience of network failures or degradation and assists in arranging for corrective actions plans. Performs the site network proposal walk-through, creates, and proofs network plant proposals for participating sites utilizing software that creates graphical representations of communications networks. Provides on-site end-user training on system operation, maintenance, and limited troubleshooting. Tracks and coordinates individual tasks for labor utilization, job performance quality and scheduling. May have responsibility for training and guidance of more junior technicians. At least 2 years in a supervisory capacity.

Task Master

III

Responsible for the coordination and supervision of a specific technical task or IT function. Ensures all activities are carried out in accordance with project commitments or specific objectives (i.e., integration and design, implementation support, database planning, etc.). Responsible for day-to-day coordination and administration of tasks by ensuring quality and productivity standards are maintained while meeting client schedules. Coordinates with other contract and subcontract personnel to ensure work moves smoothly from one functional area to another. Works with project manager and/or client to prepare work schedules and man-hour estimates. Provides written management or program plans, maintenance and operations instructions, task status analysis, cost reports, and other related documents. Ensures all administrative tools are effectively used to control and accomplish tasks and may provide operations security protection for all sensitive/critical information. Assists with writing manuals and other documentation. Responsible for status and task management reports for area of responsibility. May set up and manage project facilities. May be an individual contributor. Bachelors 5

Network Administrator

IV

Maintains local area networks (LAN) performance by performing network monitoring and analysis, and performance tuning; troubleshooting LAN problems; and escalating problems to vendor. Evaluates, recommends, installs, and supports local area network (LAN) hardware and software. Establishes LAN specifications by conferring with users to define hardware and software network needs. Establishes LAN by evaluating network performance issues including availability, utilization, throughput, and latency; planning and executing the selection, installing, configuring, and testing of equipment; defining network policies and procedures; and establishing connections and firewalls. Creates documentation standards for network cabling schemes. Manages technical installation of hardware requirements. Oversees the installation of application software programs on the LAN. Upgrades network by conferring with vendors;

developing, testing, evaluating, and installing enhancements. Prepares users by designing and conducting training programs, providing references and support.

Manages third-party maintenance for network Develops uniform operating procedures for administering LANs. At the more senior levels may be assigned responsibility for less experienced staff. Considered an emerging authority, who applies extensive technical expertise. Develops technical solutions to complex problems. Exercises considerable latitude in determining objectives and approaches to assignment. Bachelors 8

Administrativ e Assistant I**

Under immediate supervision, responsible for performing a limited variety of straightforward jobs such as filing, recording, maintaining records, copying, posting, and other similar duties, using a computer terminal, typewriter, and Associates 3

Functional Responsibilities Minimum Education

Minimum Years of

Experience other word processors. Follows organization and department procedures to complete tasks in a timely manner. Maintains and updates filing, inventory, mailing, and database systems, either manually or using a computer. Operates office machines, such as photocopiers and scanners, facsimile machines, voice mail systems and PCs. Greets visitors, answers telephones, directs calls and takes messages. Inventories and orders materials, supplies, and services. Opens, sorts and routes incoming mail, prepares outgoing mail, receives incoming packages.

Has little or no role in decision-making.

Cyber Admin Assistant II

The Cyber Admin Assistant II functions as a senior administrative support position within a cybersecurity organization. Duties include overseeing the workflow of administrative projects, developing, and implementing process improvements, and serving as a liaison between cybersecurity teams and external stakeholders. This individual will have the ability to make independent decisions and handle complex administrative tasks. They may use tools including montioring, scheduling, and ticketing systems. Bachelors 2

Cyber Capability Enhancement

SME I

The Cyber Capability Enhancement Subject Matter Expert (SME) I is responsible for providing expertise and support in enhancing cyber capabilities within an organization. They assist in the development, implementation, and evaluation of cyber training programs and exercises to improve the organization's overall cybersecurity posture. The SME I conducts research and analysis to identify emerging cyber threats and trends and recommends strategies to mitigate risks and enhance cyber defense capabilities. They may also assist in the design and delivery of educational materials and training sessions to promote cyber awareness and best practices among employees. This position requires a solid understanding of cybersecurity principles and technologies, as well as excellent communication and collaboration skills. Tools and techniques include NIST framework, threat intelligence platorms, and penetration testing software. Bachelors 3

Cyber Capability Enhancement

SME II

The Cyber Capability Enhancement Subject Matter Expert (SME) II is an experienced professional responsible for leading and overseeing the enhancement of cyber capabilities within an organization. They provide expert guidance and support in developing, implementing, and evaluating cyber training programs, exercises, and simulations. The SME II conducts in-depth analysis of cyber threats and vulnerabilities, and designs strategies and solutions to strengthen the organization's cyber defenses. They collaborate with internal and external stakeholders to ensure comprehensive and effective cyber capability enhancement initiatives. The SME II may also mentor and provide guidance to less experienced team members. This position requires advanced knowledge of cybersecurity principles, technologies, and best practices, as well as strong leadership and project management abilities. Tools and techniques include NIST framework, threat intelligence platorms, and penetration testing software. Bachelors 5

Cyber Capability Enhancement

SME III

The Cyber Capability Enhancement Subject Matter Expert (SME) III is a senior-level position responsible for leading and overseeing the strategic planning and implementation of cyber capability enhancements within an organization. They provide expert guidance and support in developing comprehensive cyber training programs and exercises that align with organizational goals and industry best practices. The SME III conducts thorough analysis of cyber threats and vulnerabilities and develops strategies to enhance cyber defenses and incident Bachelors 8

Functional Responsibilities Minimum Education

Minimum Years of

Experience response capabilities. They collaborate with cross-functional teams and senior leaders to ensure effective coordination and integration of cyber capability enhancement initiatives. The SME III also provides mentorship and guidance to less experienced team members and serves as a subject matter expert for cybersecurity matters. This position requires advanced knowledge of cybersecurity frameworks, regulations, and emerging trends, as well as exceptional leadership and communication skills. Tools and techniques include NIST framework, threat intelligence platorms, and penetration testing software.

Cyber Database Administrator I

The Cyber Database Admin I assists in the maintenance and management of databases within a cybersecurity environment. Responsibilities include data entry, routine database backups, and basic troubleshooting of database issues.

This individual will work under close supervision from senior database administrators. Commonly used tools may include backup and recovery, monitoring and data encryption tools, patch management, and database security for databases including PostgreSQL, MySQL, and Oracle. Bachelors 3

Cyber Dev Team Lead/Develop er I

The Cyber Dev Team Lead/Developer I works as part of a development team to create, implement, and maintain software applications in a cybersecurity environment. This individual may assist in project planning, coding, testing, and debugging of applications. The Cyber Dev Team Lead/Developer I will collaborate with senior developers and team leads to ensure software projects are completed successfully. Tools may include JIRA, Slack, Trello, Visual Studio, GitHub, Confluence, Docker, and Kubernetes. Bachelors 2

Cyber Governance, Risk & Compliance

SME I

The Cyber Governance, Risk & Compliance (GRC) Subject Matter Expert (SME) I is responsible for supporting the development and implementation of GRC frameworks within an organization. They assist in identifying and assessing risks, developing policies, and designing controls to ensure compliance with relevant regulations and industry standards. The Cyber GRC SME I conducts risk assessments and audits, analyzes compliance data, and recommends mitigation strategies to enhance overall risk management and regulatory compliance. They collaborate with cross-functional teams to educate and train employees on GRC policies and procedures and assist in monitoring and measuring the effectiveness of these controls. This position requires a foundational understanding of GRC principles, strong analytical skills, and the ability to communicate and collaborate effectively with diverse stakeholders.

Tools may include RSA Archer, ServiceNow GRC, regulatory tools, and Splunk. Bachelors 2

Cyber Governance, Risk & Compliance

SME II

The Cyber Governance, Risk & Compliance (GRC) Subject Matter Expert (SME) II is an experienced professional responsible for leading and managing GRC initiatives within an organization. They develop and implement comprehensive GRC strategies, frameworks, and programs to ensure alignment with organizational goals, regulatory requirements, and industry best practices.

The GRC SME II conducts in-depth risk assessments, identifies potential vulnerabilities, and designs effective mitigation strategies to minimize risks.

They establish policies and procedures to support compliance efforts and monitor the effectiveness of controls through regular audits and assessments. The GRC SME II also provides guidance and training to employees on GRC-related matters and stays updated with evolving regulations and industry trends. This position requires strong leadership abilities, advanced knowledge of GRC Bachelors 6

Functional Responsibilities Minimum Education

Minimum Years of

Experience principles, and excellent communication skills. Tools may include RSA Archer, ServiceNow GRC, regulatory tools, and Splunk.

Cyber Governance, Risk & Compliance

SME III

The Cyber Governance, Risk & Compliance (GRC) Subject Matter Expert (SME) III is a senior-level position responsible for leading and overseeing the governance, risk, and compliance functions within an organization. They develop and implement enterprise wide GRC strategies, policies, and frameworks to ensure regulatory compliance, mitigate risks, and optimize business operations. The GRC SME III conducts comprehensive assessments of the organization's risk landscape, identifies potential threats and vulnerabilities, and develops strategies to address them. They collaborate with senior management and key stakeholders to establish governance structures, define risk appetite, and prioritize risk mitigation efforts. The GRC SME III also leads internal and external audits, oversees compliance programs and initiatives, and provides guidance and training to employees at all levels. This position requires extensive knowledge of GRC principles, significant leadership and strategic planning skills, and the ability to navigate complex regulatory landscapes. Tools may include RSA Archer, ServiceNow GRC, regulatory tools, and Splunk. Bachelors 10

Cyber Incident Management Forensics Surge Support

SME II

The Cyber Incident Management Forensics Surge Support SME II is responsible for providing subject matter expertise and support in incident management and forensics activities. They will assist in the identification, containment, analysis, and eradication of cybersecurity incidents. This role requires strong analytical skills to thoroughly investigate incidents, gather evidence, and determine the cause and impact of the incident. They will also develop and implement incident response plans and provide guidance to less experienced team members. The Cyber Incident Management Forensics Surge Support SME II may be required to provide surge support during high-impact security incidents. They will work under direct supervision, receiving detailed instructions on tasks and objectives.

Tools may include EnCase Forensic, Forensic Toolkit, Wireshark, Splunk, FireEye, and Security Incident Event Management. Bachelors 3

Cyber Incident Management Forensics Surge Support

SME III

The Cyber Incident Management Forensics Surge Support SME III is responsible for providing advanced subject matter expertise and support in incident management and forensics activities. They will lead the identification, containment, analysis, and eradication of highly complex cybersecurity incidents. This role requires extensive experience and knowledge in incident response, forensic analysis, and cybersecurity tools. The Cyber Incident Management Forensics Surge Support SME III will develop and implement incident response plans, train and mentor junior team members, and provide guidance to less experienced analysts. They will work independently with minimal supervision and may be required to provide surge support during high-impact security incidents. Tools may include EnCase Forensic, Forensic Toolkit, Wireshark, Splunk, FireEye, and Security Incident Event Management. Bachelors 5

Cyber Incident Management / Forensics

FOIA SME II

The Cyber Incident Management / Forensics FOIA SME II is responsible for providing subject matter expertise and support in incident management, forensics, and Freedom of Information Act (FOIA) processes. They will assist in the identification, containment, analysis, and eradication of cybersecurity incidents, while also ensuring compliance with FOIA regulations and guidelines.

This role requires strong analytical skills to investigate incidents, gather Bachelors 3

Functional Responsibilities Minimum Education

Minimum Years of

Experience evidence, and determine the impact on FOIA-related information. The Cyber Incident Management / Forensics FOIA SME II will develop and implement incident response plans with FOIA considerations and collaborate with FOIA professionals. They will work under direct supervision, following established procedures and guidelines. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox.

Cyber Incident Management / Forensics

SME I

The Cyber Incident Management/Forensics Subject Matter Expert (SME) I is responsible for providing expertise and support in incident management and forensic investigations. This includes identifying, analyzing, and resolving security incidents and breaches, as well as conducting forensic investigations to determine the root cause of incidents. The SME I will work under the guidance of more senior team members and follow established procedures and protocols to mitigate risks and prevent future incidents. They will also assist in the development and implementation of incident response plans and provide training and guidance to other team members when necessary. The position requires a high level of attention to detail and the ability to analyze and interpret complex technical information. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox. Bachelors 1

Cyber Incident Management / Forensics

SME II

The Cyber Incident Management/Forensics Subject Matter Expert (SME) II is responsible for providing advanced expertise and support in incident management and forensic investigations. They will independently analyze and resolve complex security incidents and breaches, utilizing advanced forensic tools and techniques to determine the root cause and impact of incidents. The SME II will also assist in the development and implementation of incident response plans and provide training and guidance to less experienced team members. They will stay up to date with the latest trends and technologies in incident management and forensic investigations and may be required to present findings and recommendations to management and clients. This position requires a high level of technical proficiency and the ability to work autonomously. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox. Bachelors 3

Cyber Incident Management / Forensics

SME III

The Cyber Incident Management/Forensics Subject Matter Expert (SME) III is a senior-level position responsible for leading and directing incident management and forensic investigations. They will provide expert guidance and support in identifying, analyzing, and resolving the most complex and high-impact security incidents and breaches. The SME III will utilize advanced forensic tools and techniques to conduct thorough investigations, uncovering the root cause and impact of incidents. They will develop and implement incident response plans and ensure that proper protocols are followed by the team. The SME III will also provide training, mentoring, and direction to less experienced team members, and collaborate with stakeholders to develop strategies for incident prevention Bachelors 5

Functional Responsibilities Minimum Education

Minimum Years of

Experience and response. This position requires a deep understanding of incident management and forensic methodologies, as well as the ability to communicate complex findings to technical and non-technical audiences. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox.

Cyber Infrastructure Specialist, Lead

The Cyber Infrastructure Specialist, Lead, is responsible for overseeing and leading infrastructure-related projects and initiatives. They will be responsible for the design, implementation, and maintenance of infrastructure systems such as networks, servers, databases, and storage systems. The Cyber Infrastructure Specialist, Lead, will provide technical guidance and support to a team of infrastructure specialists, ensuring that projects are completed on time and within budget. They will collaborate with other IT teams and stakeholders to assess infrastructure needs, recommend solutions, and develop implementation plans.

This role requires a high level of technical expertise and knowledge of infrastructure best practices. The Cyber Infrastructure Specialist, Lead, will work under general supervision, with moderate oversight and direction. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox. Bachelors 5

Cyber IT Business Process Engineer III

The Cyber IT Business Process Engineer III is responsible for analyzing, designing, and implementing IT business processes within a cybersecurity environment. This individual will collaborate with stakeholders to identify process improvement opportunities, develop process documentation, and implement automation solutions. The Cyber IT Business Process Engineer III will lead process re-engineering initiatives, conduct process audits, and ensure alignment with cybersecurity standards and best practices. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox. Bachelors 5

Cyber Network & Systems Security SME

II

The Cyber Network & Systems Security SME II is responsible for providing subject matter expertise and support in network and systems security. They will assess and analyze network and system vulnerabilities, develop, and implement security solutions, and monitor and respond to security incidents. The Cyber Network & Systems Security SME II will conduct security assessments, penetration testing, and vulnerability scans to identify potential weaknesses and recommend appropriate remediation actions. They will also assist in the development and implementation of security policies, standards, and procedures.

This role requires strong technical knowledge and experience in network and systems security, as well as the ability to work collaboratively across different teams. The Cyber Network & Systems Security SME II may provide guidance and support to less experienced team members. They will work under general supervision, with some autonomy in decision-making. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and Bachelors 4

Functional Responsibilities Minimum Education

Minimum Years of

Experience entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox.

Cyber Network & Systems Security SME

III

The Cyber Network & Systems Security SME III is a senior-level position responsible for providing advanced subject matter expertise and support in network and systems security. They will lead and oversee the assessment, design, implementation, and management of network and system security measures to protect against cyber threats and vulnerabilities. The Cyber Network & Systems Security SME III will conduct in-depth analysis of security infrastructure, recommend, and implement security solutions, and develop and enforce security policies and procedures. They will also lead incident response efforts, conducting root cause analysis, and coordinating with internal stakeholders and external partners as needed. This role requires extensive technical knowledge, experience, and expertise in network and systems security, as well as strong leadership and communication skills. The Cyber Network & Systems Security SME III may provide guidance and support to junior team members. They will work under limited supervision, with a high level of autonomy and responsibility. Tools may include Security Orchestration and Automated Response, Full Packet Capture, User and entity behavior analytics, Google Vault, Tenable Security Center, Palo Alto, CounterACT Forescout, Zimperium, InfoBlox, AirWatch, Netskope (CASB), and Skybox. Bachelors 8

Cyber Network & Systems Security SME

IV

The Cyber Network & Systems Security SME IV is a highly experienced professional responsible for providing expert-level subject matter expertise and support in network and systems security. They will lead and oversee comprehensive security assessments, design, and implement advanced security solutions, and establish robust security controls and protocols to safeguard network and system infrastructure against sophisticated cyber threats. The Cyber Network & Systems Security SME IV will conduct in-depth analysis of security frameworks, identify vulnerabilities, and develop and deploy advanced threat mitigation strategies. They will also lead incident response efforts, coordinating with cross-functional teams and external stakeholders to effectively respond to and remediate security incidents. This role requires extensive technical knowledge, experience, and expertise in network and systems security, as well as exceptional leadership, problem-solving, and communication skills. The Cyber Network & Systems Security SME IV may mentor and provide guidance to junior team members. They will work under limited supervision, with a high level of autonomy and responsibility. The tools may include EnCase Forensic, Forensic Toolkit, Wireshark, Splunk, FireEye, and Security Incident Event Management. Bachelors 10

Cyber Network & Systems Security SME V

The Cyber Network & Systems Security SME V is a top-level expert responsible for providing strategic direction, thought leadership, and expert-level subject matter expertise in network and systems security. They will lead and guide the development and implementation of comprehensive security strategies, policies, procedures, and best practices to protect critical network and system infrastructure from advanced and emerging cyber threats. The Cyber Network & Systems Security SME V will conduct in-depth assessments of security architectures, frameworks, and technologies to identify vulnerabilities and Masters 8

Functional Responsibilities Minimum Education

Minimum Years of

Experience recommend advanced security measures and controls. They will lead incident response efforts, including the coordination of cross-functional teams, executive-level communication, and the development of incident response plans. This role requires exceptional technical knowledge, experience, and expertise in network and systems security, as well as exemplary leadership, strategic thinking, and communication skills. The Cyber Network & Systems Security SME V may serve as a mentor and advisor to junior team members and will work under minimal supervision, providing executive-level guidance and direction. The tools may include EnCase Forensic, Forensic Toolkit, Wireshark, Splunk, FireEye, and Security Incident Event Management.

Cyber Network Security Engineer, Lead

The Cyber Network Security Engineer, Lead is responsible for overseeing and leading network security initiatives within an organization. They will design, implement, and maintain network security measures to protect against cyber threats, unauthorized access, and data breaches. The Network Security Engineer, Lead will assess network vulnerabilities, monitor network traffic, and implement security controls and protocols. They will collaborate with cross-functional teams, including network administrators and system engineers, to ensure the secure configuration and operation of network infrastructure. Additionally, the Network Security Engineer, Lead will provide guidance and mentorship to junior engineers, assist in incident response activities, and lead efforts to develop and enforce network security policies and procedures. This role requires strong technical expertise, leadership skills, and the ability to stay updated on the latest network security trends and technologies. The Network Security Engineer, Lead will work under limited supervision, with autonomy to make decisions and recommendations. The tools may include EnCase Forensic, Forensic Toolkit, Wireshark, Splunk, FireEye, and Security Incident Event Management. Bachelors 8

Cyber Privacy

SME I

The Cyber Privacy SME I is responsible for providing entry-level support and guidance in privacy-related matters within an organization. They will assist in the development and implementation of privacy policies, procedures, and controls to ensure compliance with applicable laws, regulations, and industry standards. The Cyber Privacy SME I will assist in conducting privacy risk assessments, responding to privacy incidents, and providing guidance on privacy-related queries and concerns. This role requires a basic understanding of privacy laws and regulations, data protection practices, and risk management.

The Cyber Privacy SME I will work under close supervision, receiving guidance and support from senior privacy professionals. The tools may include ServiceNow, CSIRT Distribution Group, Bitsight, iSight/Mandiant Advantage, Looking Glass, and Classnet. Bachelors 2

Cyber Privacy

SME II

The Cyber Privacy SME II is responsible for providing intermediate-level support and guidance in privacy-related matters within an organization. They will contribute to the development and maintenance of privacy policies, procedures, and controls, ensuring compliance with privacy laws, regulations, and industry standards. The Cyber Privacy SME II will assist in conducting privacy risk assessments, responding to privacy incidents, and providing guidance and training on privacy-related topics. This role requires a solid understanding of privacy laws and regulations, data protection practices, and risk management. The Cyber Privacy SME II will work under general supervision, Bachelors 5

Functional Responsibilities Minimum Education

Minimum Years of

Experience with some autonomy in decision-making. The tools may include ServiceNow, CSIRT Distribution Group, Bitsight, iSight/Mandiant Advantage, Looking Glass, and Classnet.

Cyber Privacy

SME III

The Cyber Privacy SME III is responsible for providing advanced-level support and guidance in privacy-related matters within an organization. They will lead the development, implementation, and maintenance of privacy policies, procedures, and controls to ensure compliance with privacy laws, regulations, and industry standards. The Cyber Privacy SME III will conduct privacy risk assessments, lead privacy incident response efforts, and provide expert guidance and training on privacy-related topics. This role requires a deep understanding of privacy laws and regulations, data protection practices, risk management, and policy development. The Cyber Privacy SME III will work under limited supervision and may provide guidance and support to junior privacy professionals. The tools may include ServiceNow, CSIRT Distribution Group, Bitsight, iSight/Mandiant Advantage, Looking Glass, and Classnet. Bachelors 6

Cyber Program Manager I

The Cyber Program Manager I is responsible for overseeing and coordinating cybersecurity programs within an organization. This role involves managing multiple cybersecurity initiatives, projects, and activities to support the organization's overall cybersecurity objectives. The Cyber Program Manager I develops program plans, schedules, and budgets, and ensures that program deliverables are met on time and within scope. They collaborate with stakeholders, cybersecurity teams, and external partners to address program risks, resolve issues, and communicate program status updates. This position may involve managing small to medium-sized cybersecurity programs with limited complexity. Tools may include project management software, resource planning, communication, budgeting, and stakeholder and risk management tools. Bachelors 2

Cyber Program Manager II

The Cyber Program Manager II serves as a senior-level leader responsible for overseeing complex programs and projects within an organization. They are responsible for the successful planning, execution, and delivery of programs that align with organizational goals and objectives. The Program Manager II manages the program budget, resource allocation, and overall program performance. They establish program objectives, milestones, and deliverables, and ensure that the program is delivered within scope, on time, and within budget. The Cyber Program Manager II leads a team of project managers and cross-functional teams, providing guidance, direction, and mentorship. They communicate program status, risks, and issues to stakeholders at various levels and work collaboratively to resolve challenges and mitigate risks. This role requires exceptional leadership, strategic thinking, communication, and stakeholder management skills. The Cyber Program Manager II works under limited supervision and has a high level of accountability and responsibility for program success. Tools may include project management software, resource planning, communication, budgeting, and stakeholder and risk management tools. Bachelors 4

Cyber Program Manager V

The Cyber Program Manager V is a senior-level position responsible for leading and overseeing large-scale, complex programs within an organization. They are responsible for driving the successful planning, execution, and delivery of strategic programs that align with organizational objectives. The Cyber Program Bachelors 12

Functional Responsibilities Minimum Education

Minimum Years of

Experience Manager V provides strategic direction,…