MAS - Network Enterprise Solution Team Tactics LLC - 47QTCA24D005A

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: F-Information Technology

Contract Number: 47QTCA24D005A Contract period: Feb 14, 2024- Feb 14, 2029

NESTT LLC

226 Ft Farnsworth Rd, Apt 1B Alexandria, VA 22303-2622 www.nestt.net

Business size: Small Business

Prices Shown Herein are Net (discount deducted) http://www.supportingeffort.com/ http://www.gsa.gov/schedules

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs SIN Title 54151S Information Technology Professional Services

54151HACS Highly Adaptive Cybersecurity Services (HACS)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply.

See Pricelist

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See below

2. Maximum order:

SINs Maximum Order 54151S $500,000

54151HACS $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production (city, county, and State or foreign country).

226 Ft Farnsworth Rd, Apt 1B Alexandria, VA 22303-2622

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. 1% discount for orders over $250,000

8. Prompt payment terms. 1% Discount Net 20

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. To Be Determined at the Task Order level

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. To Be Determined at the Task Order level

10c. Overnight and 2-day delivery. To Be Determined at the Task Order level

10d. Urgent Requirements. To Be Determined at the Task Order level

11. F.O.B. point(s). Destination

12a. Ordering address(es). 226 Farnsworth Rd. Apt 1B. Alexandria, VA 22303-2622

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

226 Farnsworth Rd. Apt 1B

Alexandria, VA 22303-2622

14. Warranty provision. None

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g. contractor’s website or other location.) ICT accessibility standards can be found at: https://www.Section508.gov/.

Contractor will comply with Section 508 if applicable at the Task Order Level.

23. Unique Entity Identifier (UEI) number. REXUSBPW2LJ3

24. Notification regarding registration in System for Award Management (SAM) database.

Contractor registered and active in SAM

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101,

22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

http://www.section508.gov/

NESTT Labor Category

Senior Program Manager

Functional Responsibility: Oversees and orchestrates the strategic planning, execution, and technical oversight of the organization’s cybersecurity initiatives, specifically focusing on Penetration Testing, Incident Response, High Value Asset (HVA) protection, Risk and Vulnerability Assessments (RVA), and proactive Cyber Hunt operations. Skillfully negotiates and drafts contracts, ensuring alignment with intricate financial frameworks, resource allocations, and rigorous contractual mandates. Spearheads the development of new cybersecurity business avenues and the augmentation of existing cybersecurity solutions. Guarantees rigorous compliance with overarching project frameworks and timelines, devising innovative solutions to complex challenges encountered during program execution. Provides expert guidance to both the program team and project managers on a multitude of aspects ranging from tactical project execution to strategic operations management. Develops comprehensive proposals aimed at securing new cybersecurity projects, leveraging in-depth understanding of the cybersecurity landscape. Effectively manages a team of specialized professionals, ensuring optimal performance in line with organizational goals and stringent budget constraints. Holds full accountability for personnel decisions and leads autonomously or under the strategic direction of executive management, encompassing all facets of program performance from contract procurement and management to project/task coordination, resource allocation, and integration with corporate objectives and directives.

Minimum Education: Bachelors degree

Minimum Experience: 10 years

Project Manager

Functional Responsibility: Serves as central point of contact with the contracting officer, contracting officer’s representative, and task managers, specifically managing projects related to Incident Response, Penetration Testing, High Value Asset (HVA) protection, Risk and Vulnerability Assessments (RVA), and Cyber Hunt activities. Responsible for orchestrating the management of all cybersecurity contract-related work, including coordination with subcontractors, team members, and vendors. Ensures constant communication with Senior Program Manager regarding the status of task order projects, particularly focusing on the technical challenges and progress in the domains of Penetration Testing, Incident Response, HVA, RVA, and Cyber Hunt. Tasked with updating client representatives and when necessary, escalating critical issues related to these domains. Facilitates information required by the team from the client to implement various task order projects effectively. Ensures adherence to project priorities, deadlines, and budget constraints while maintaining high standards of quality and productivity, especially in the technical aspects of cybersecurity. Supervises the training of new personnel assuring compliance with regulations, standards, policies, and procedures, with a special focus on enhancing Penetration Testing, Incident Response, HVA, RVA, and Cyber Hunt capabilities.

Minimum Education: Bachelors degree

Minimum Experience: 5 years

Senior Cybersecurity System Engineer

Functional Responsibility: Responsible for designing, implementing, and maintaining the company's cybersecurity infrastructure. Expertise in database planning and design, systems analysis and integration, programming, and data/records management. Well-versed in cybersecurity tools and technologies, such as intrusion detection and prevention systems, firewalls, SIEM, and vulnerability scanning tools. Experienced with advanced security topics, including threat intelligence, threat hunting, and incident response. Develops and implements secure designs for enterprise-level networks, data centers, and cloud infrastructures. Able to troubleshoot complex security systems and ensure that the company's security posture is always up-to-date and compliant with industry standards and regulations. Performs complex enterprise wide assessments of information assurance posture based on deployed computer network defense capabilities. Understands the business impact of potential data loss, interruptions in service, or and correlates that to information into recommended design and deployment priorities. Possesses a deep understanding of enterprise architecture, networks, data centers, public and private cloud, and applications and how information assurance systems interact. Demonstrates an expert level understanding of multiple information assurance software and hardware products.

Minimum Education: Bachelors degree

Minimum Experience: 10 years

Junior Cybersecurity System Engineer

Functional Responsibility: Supports Senior Cybersecurity Engineer in designing, implementing, and maintaining the company's cybersecurity infrastructure. Assists with the implementation and maintenance of RMF services, information assurance, virus detection, zero trust architecture, network management, situational awareness and incident response, secure web hosting, backups, security services, and SOC services. Familiar with cybersecurity tools and technologies, such as firewalls, intrusion detection and prevention systems, and vulnerability scanning tools. Possesses knowledge of basic security topics, including risk management and security assessments. Analyzes technical problems and identifies solutions to support the company's security posture. Under specific direction, designs, deploys and maintains enterprise computer network defense capabilities from the enterprise down to the end point. Supports the capture of relevant IT requirements and assists team leads and project managers with information assurance architecture and designs. Once deployed, maintains and tunes information assurance systems across network, data center, cloud, and at the application layer as needed. Reports performance issues to senior management.

Minimum Education: Bachelors degree

Minimum Experience: 4 years

Information Security Specialist

Functional Responsibility: Analyzes and defines security requirement for computer systems which may include mainframes, workstations, and personal computers. Designs, develops, engineers, and implements solutions that meet security requirements. Provides integration and implementation of the computer system security solutions. Establishes and satisfies complex system-wide information security requirements based upon the analysis of user, policy, regulatory, and resource demands. Analyzes general information assurance-related technical problems and provides basic engineering and technical support in solving these problems. Designs, develops, engineers, and implements solutions that meet network security requirements.

Minimum Education: Bachelors degree

Minimum Experience: 4 years

Junior Security Analyst

Functional Responsibility: Analyzes and defines security requirements for information protection.

Defines and develops security policies. Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow.

Investigates and contributes to large and small-scale computer security incident response events on a global network. Leverages advanced tools to identify and mitigate malicious activity, ranging from malware to potential interactive intrusions. Analyzes computer systems and network traffic for signs of infection or compromise. Characterizes suspicious binaries and identifies traits. Identifies potential malicious activity from memory dumps, logs, and packet captures. Interacts and assists other investigative teams on time sensitive, critical investigations. Participates as part of a close team of technical specialists on coordinated responses and subsequent remediation of security incidents.

Minimum Education: Bachelors degree

Minimum Experience: 5 years

Mid-level Consultant

Functional Responsibility: Serves as independent expert or senior member of consulting teams or acts as a task manager or as a project leader on projects of substantial scope and complexity. As a consulting team member or independent expert, collects, analyzes, and interprets data in one or more information technology or management specialties. Develops or participates in the development of assignment methodology. Provides expertise in system operations, information modelling, IT management, and policies and procedures. Supports IT modernization and consolidation projects.

Minimum Education: Bachelors degree

Minimum Experience: 7 years

Penetration Tester

Functional Responsibility: Performs ethical hacking, firewall and intrusion detection/ prevention technologies, secure coding practices and/or threat modeling. Performs penetration testing with focus on initial exploitation and post-exploitation phases. Follows industry best practices and methodologies, to perform penetration testing services to uncover vulnerabilities across platforms.

Researches new threats, attack vectors, and risk.

Minimum Education: Bachelors degree

Minimum Experience: 3 years

NESTT Awarded Labor Category Rates

SIN Labor Category GSA Rate Year 1

GSA Rate Year 2

GSA Rate Year 3

GSA Rate Year 4

GSA Rate Year 5

54151HACS Senior Program Manager $ 278.80 $ 287.16 $ 295.78 $ 304.65 $ 313.79

54151HACS Project Manager $ 132.53 $ 136.51 $ 140.60 $ 144.83 $ 149.17

54151HACS

Senior Cybersecurity System Engineer $ 192.54 $ 198.32 $ 204.26 $ 210.39 $ 216.70

54151HACS

Junior Cybersecurity System Engineer $ 136.70 $ 140.80 $ 145.02 $ 149.37 $ 153.85

54151S Information Security Specialist $ 127.20 $ 131.02 $ 134.95 $ 139.00 $ 143.17

54151HACS Junior Security Analyst $ 135.82 $ 139.89 $ 144.09 $ 148.41 $ 152.87

54151S Mid-level Consultant $ 174.21 $ 179.44 $ 184.82 $ 190.36 $ 196.07

54151HACS Penetration Tester $ 162.10 $ 166.96 $ 171.97 $ 177.13 $ 182.44