MAS - Cloud9 Security Services Inc. - 47QTCA23D009J

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage! ®, a menu-driven database system. The INTERNET address GSA Advantage! ® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology

Contract number: 47QTCA23D009J

Contract period: June 6, 2028 to June 6, 2043

Cloud9 Security Services Inc.

7016 Green Oak Dr McLean, VA 22101

Phone Number: 703-867-6637

Website: https://c9sec.com

Contract administration source Omer Malik Email: omer@c9sec.com

Business size: Small Business Small Disadvantaged Business | Service Disabled Veteran Owned Small Business

For more information on ordering from Federal Supply Schedules go to the GSA Schedules page at GSA.gov.

Price list current as of Modification #PO-0007 effective 6/20/2024 *This is the MOST RECENTLY awarded Contractor Initiated Modification and does NOT include any Mass Modifications

Prices Shown Herein are Net (discount deducted)

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 6

2. Maximum order: $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production (city, county, and State or foreign country). Company Address

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. Additional 2% for orders over $350,000.00

8. Prompt payment terms. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions. Net 30 days

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

12a. Ordering address(es).

7016 Green Oak Dr, McLean, VA 22101

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

7016 Green Oak Dr, McLean, VA 22101

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g. contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. UKAUWK1DHUK3

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

· Awarded labor category rates

Labor Category Title Escalation Rate - 4.5%

· Awarded labor category descriptions

database analysis, administration, design and development, client-server architectures, Web-enabled applications and graphics design. Participates in all phases of the software development life cycle including the design, development, integration, testing and implementation phases. Performs quality assurance and technical review activities. Assists in the resolution of end-user software problems. Works with management and end-user groups to identify requirements for future product enhancements. Develops technical documentation, end-user documentation and training materials.

database security procedures.

• Monitors and may oversee database security by controlling and monitoring user access.

• Researches, develops and reviews database designs for new projects.

• Creates and maintains database structures and objects.

• Monitors the performance and growth and prepares entities, attributes, and relationships for required transaction and data volumes.

• Develops and maintains database configuration documentation.

• Designs and executes database backup and recovery strategies.

Five years of technical experience in developing and administering database management systems and/or enterprise data warehouses. Must have significant technical experience designing logical data models, implementing physical schema, and implementing and maintaining databases. Experience should include participation in all phases of the database development life cycle, including the data model design, physical schema implementation, application development, integration, testing, production operation, performance tuning, quality assurance, technical review, and assisting in the resolution of end-user problems for IT. Must have demonstrated expertise and experience in designing and implementing security features for SQL and Oracle databases and for protecting data confidentiality in database management systems.

technical lead for the project.

would include ITIL, Six Sigma, PMI, ISO or similar training.

Assess the operational and functional baseline of an organization and its organizational components, and help to define the direction and strategy for an engagement while ensuring the organizational needs are being addressed. Typical areas addressed include Human Resources, Finance, Supply, and operations. Identify information technology inadequacies and/or deficiencies that affect the functional area’s ability to support/meet organizational goals. Support the development of functional area strategies for enhanced IT.

Assess the operational and functional baseline of an organization and its organizational components, and help to define the direction and strategy for an engagement while ensuring the organizational needs are being addressed. Typical areas addressed include Human Resources, Finance, Supply, and operations. Identify information technology inadequacies and/or deficiencies that affect the functional area's ability to support/meet organizational goals. Generate functional area strategies for enhanced IT operations in a cross-functional area mode throughout the organization. Participate in account strategy sessions, strategic assessments and design reviews to validate enterprise approach and associated work products, such as ERP implementations coordinating the resolution of highly complex problems and tasks.

Training and/or certification concentration would include ITIL and/or PMI or similar training.

Develop, in conjunction with functional users, system alternative solutions.

Evaluate analytically and systematically problems of workflows, organization, and planning and develop appropriate corrective action.

The Program Manager has excellent problem-solving skills and be able to think quickly and adeptly about how to address problems as they come up and to learn from the issues so that the same problems do not arise again.

Program Manager requires advanced interpersonal skills. Relates well to others when dictating responsibilities, offers constructive feedback and supports and encourages others. Ensures that the team works effectively, motivating them and earning their respect.

Because the Program Manager has to keep track of so many different things at once, must be able to multi-task, tracking spending, adjusting budgets, hiring and reviewing employees, looking for gaps in work efficiency, communicating with the team and suggesting changes in the program. Has the ability to switch quickly between tasks and to think about the project on many different levels at once.

• Provides administrative support to enterprise security devices

• Provides support of various applications and implement security standards

• Assist with configuration, validate secure complex systems, and test security products and systems to detect security weakness.

• Assist with assessing, designing, developing, and recommending integrated security system solutions that ensure proprietary and confidential data and systems are protected

• Provide assistance with technical engineering services for the support of integrated security systems and solutions

• Interface with the client in the strategic design process to translate security and business requirements into technical designs

• Assist with configuration, validate secure complex systems, and test security products and systems to detect security weakness

• Configure and maintain policies

• Maintain documentation for exceptions to standards

• Provides timely and adequate response to threats/alerts

• Assess security events to drive to a resolution

• Provides timely and sufficient response to security incidents and assessment services

• Promotes security awareness

• Lead team of security engineers, manage large scale deployment, assessment, and O&M projects

• Validates and verifies system security requirements definitions and analysis and establishes system security designs

• Designs, develops, implements and/or integrates IA and security systems and system components including those for networking, computing, and enclave environments

• Builds IA into systems deployed to operational environments

functional requirements and resources required for each task.

• Uses current hashing algorithms to validate forensic images; diagrams networks and images servers to support digital forensics operations

• Utilizes a variety of industry standard tools and techniques to collect a system’s current state data and catalog, document, extract, collect, and preserve information

• Uses dynamic analysis to identify network intrusions and network monitoring tools to capture Realtime traffic spawned by any running malicious code; identifies internet activity that is triggered by malware; identifies network/host-based characteristics and assists in drafting recommendations to detect and prevent malware infections in the future

• Monitor and assess complex security devices for patterns and anomalies (IDS, DLP), tag events for Tier 1 monitoring

• Pinpoints location of compromised systems and devices.

• Correlates events from the various components in the IT security infrastructure and identifies attacks and breaches

• Identifies, deters, monitors, and investigates computer and network intrusions

• Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery

• Monitor and assess complex security devices for patterns and anomalies from raw events (DNS, DHCP, AD, SE logs), tag events for Tier 1 & 2 monitoring

• Conduct malware analysis in out-of-band environment (static and dynamic), including complex malware

• Lead Cyber Hunt team, provides oversight and be responsible for event investigation and tracking activities

• Identifies, deters, monitors, and investigates computer and network intrusions

• Provide computer forensic support to high technology investigations in the form of evidence seizure, computer forensic analysis, and data recovery

• Monitor and assess complex security devices for patterns and anomalies from raw events (DNS, DHCP, AD, SE logs), tag events for Tier 1 & 2 monitoring Conduct malware analysis in out-of-band environment (static and dynamic), including complex malware

individuals assisting in the work.

Duties may include:

• Handle and respond to cyber security incidents through coordination with stakeholders such as internal IT entities, security leadership, legal affairs, internal affairs, law enforcement, and privacy offices

• Intake incident reporting, conduct ticket updates, and notify stakeholders of cyber security incidents and forensic investigations in relation to computer security incidents and escalate when necessary as well as coordinate response to computer security incidents

• Recommend a course of action on each incident and creates, manages, and records all actions taken and serve as initial POC for Events of Interest reported both internally and externally

• Establishes alarm/incident escalation process and tracks, follows-up, and resolves incidents

• Initiates and maintains contact with affected parties during incident response lifecycle.

Investigates potential incidents/intrusions

• Provides oversight for incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets

• Performs real-time proactive event investigation on various security enforcement systems, such as SIEM, Anti-virus, Internet content filtering/reporting, malcode prevention, Firewalls, IDS & IPS, Web security, antispam, etc.

• Performs the role of Incident Coordinator for IT Security events requiring focused response, containment, investigation, and remediation

• Performs forensic analysis on hosts supporting investigations

• Conducts malware analysis in out-of-band environment (static and dynamic), including complex malware

• Lead shifts and functional IR teams, provides oversight for incident data flow and response, content, and remediation, and partners with other incident response centers in maintaining an understanding of threats, vulnerabilities, and exploits that could impact networks and assets

• Performs real-time proactive event investigation on various security enforcement systems, such as SIEM, Anti-virus, Internet content filtering/reporting, malcode prevention, Firewalls, IDS & IPS, Web security, antispam, etc.

• Performs the role of Incident Coordinator for IT Security events requiring focused response, containment, investigation, and remediation

• Performs forensic analysis on hosts supporting investigations

• Conducts malware analysis in out-of-band environment (static and dynamic), including complex malware

• Coordinate response action to identifies threats and incidents

• Analyze operational anomalies, network behavior and performs mitigation actions derived from cyber threat monitoring and anomaly analysis, and actively monitors the networks for cybersecurity threats and vulnerabilities

• Provide oversight and perform quality assurance on Incident Closures

• Assist with knowledge management - Standard Operating Procedures and procedural support data

• Lead one or more functional security teams (Incident response, forensics, cyber intelligence etc.)

• Support the development of staff schedules and staffing forecasts for approval

• Ensure shift members follow the appropriate incident escalation and reporting procedures

• Provides support promptly and efficiently through front-line telephone and email communications

• Ingest, triage, prioritize, assign, track, document, and manage incidents and results

• Provide technical support in response to computer security incidents Correlate, map, and fuse any and all incident information for the development and distribution of cyber alerts and notices, or other products as Required

• Document technical details of current or potential intruder threats consistent with environment

• Coordinate, communicate, share information, and work closely with organizational stakeholders

• Responsible for knowledge management of operational procedures and support documentation

• Provides technical support on post event network security logs and trend analysis

• Uncovers security and compliance violations

• Associates and correlates IP address related events with specific systems or devices in the IT infrastructure

• Support development and analysis of system and security documentation Maintain documentation for exceptions to standards

• Develop, document and execute containment strategies

• Document and brief the business on remediation options and execute the plan with stakeholders

• Produce final report and recommendation

• Coordinate efforts of, and provide timely updates to, multiple business units during response

• Performing in-depth analysis in support of incident response operations

• Develop requirements for technical capabilities for cyber incident management

• Investigate major breaches of security and recommending appropriate control improvements

• Work with infrastructure and application support teams to drive closure of follow up actions identified through incident and problem management

• Performs Security Control Assessments on systems to validate the results of risk assessments and ensure controls in the security plan are present and operating correctly on the system; provides thorough report of the risks to the system and its data

• Develop and analyze system and security documentation

• Support engineering design teams by assessing network and system security design features and making recommendations concerning overall security accreditation readiness and compliance and best practices

• Support interoperability assessment teams and present written analysis and conclusions in all…