MAS - Secure Consulting Solutions LLC - 47QTCA24D0077

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

Online access to contract ordering information, terms and conditions, pricing, and the option to create an electronic delivery order are available through GSA Advantage!®. The website for GSA Advantage!® is: https://www.GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class: F03 Contract number: 47QTCA24D0077

Contract period: March 28, 2024 through March 27, 2029

SECURE CONSULTING SOLUTIONS LLC

3622 OLD MILL RD

CAPON BRIDGE, WV 26711-9425

Phone Number (301)748-6790 https://www.securesolutionsdc.com/

Contract administration source (if different from preceding entry).

Peter Paccionne

Business size: Small Business SBA Certified Small Disadvantaged Business SBA Certified HUBZone Firm

For more information on ordering, go to the following website: https://www.gsa.gov/schedules

Prices Shown Herein are Net (discount deducted)

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

OLMRC

Order-Level Materials (OLM’s)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 4

2. Maximum order: $500000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production (city, county, and State or foreign country).

SECURE CONSULTING SOLUTIONS LLC

3622 OLD MILL RD

CAPON BRIDGE, WV 26711-9425

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. None

8. Prompt payment terms. Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

12a. Ordering address(es).

SECURE CONSULTING SOLUTIONS LLC

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es).

SECURE CONSULTING SOLUTIONS LLC

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g. contractor’s website or other location.) ICT accessibility standards can be found at: https://www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. EP16NRKQ45H8

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

Labor Category Descriptions

Senior Penetration Tester, Prin (Chief Eng)

Job Summary:

The Senior Penetration Tester, Prin (Chief Eng) is a senior-level position in the government's cybersecurity team. This role is responsible for performing complex and sophisticated technical assessments to identify vulnerabilities and potential weaknesses in the government's computer networks, systems, and applications. The incumbent will be expected to have advanced skills in penetration testing, network security, and ethical hacking, among others. Additionally, this position may lead or supervise other cybersecurity professionals in conducting penetration testing activities.

Duties and Responsibilities:

Conduct penetration testing activities to assess the security of government systems, applications, and networks, and identify vulnerabilities and potential threats.

Develop and implement advanced technical methodologies, tools, and techniques to assess and exploit security weaknesses and potential threats in government systems, applications, and networks.

Provide guidance and expertise to other cybersecurity professionals on penetration testing techniques, methodologies, and tools.

Lead or supervise other cybersecurity professionals in conducting penetration testing activities.

Prepare detailed and comprehensive reports on findings and recommendations for mitigating identified vulnerabilities and potential threats.

Communicate and collaborate effectively with other cybersecurity professionals, IT staff, and stakeholders to provide recommendations for improving the security posture of government systems, applications, and networks.

Stay current with emerging threats and trends in cybersecurity and penetration testing techniques, and continually improve technical skills and knowledge through professional development activities.

Qualifications:

Advanced technical skills in penetration testing, network security, ethical hacking, and other related fields.

Strong knowledge of security standards, protocols, and technologies, including OWASP, NIST, CIS, and others.

Experience with various penetration testing tools, such as Kali Linux, Metasploit, Nessus, Burp Suite, and others.

Experience with vulnerability management and risk assessment methodologies.

Strong analytical and problem-solving skills, with the ability to identify and assess security risks and vulnerabilities.

Strong communication and collaboration skills, with the ability to effectively communicate technical concepts to non-technical stakeholders.

Minimum Experience: 10 years Minimum Education: bachelor’s degree

Info Assurance Engineer Individuals would be responsible for providing technical assessments and expertise on specific projects. This would require being able to understand a complex system in a short amount of time, determine its security weaknesses at all layers to include hosts, databases, middleware, and applications and then generating clear, descriptive reports that include corrective actions to help guide the developer on how to mitigate the weaknesses.

Responsibilities:

Web Application Penetration Testing using a proxy tool and manual techniques.

Assessment of applications against the OWASP Top 10 and SAN top 25 to include how that guidance.

maps to NIST 800-53 Perform manual verification of DISA Security Technical implementation guides against web and host.

configurations to include Unix and Windows based systems.

Write custom SCAP content customization.

General manual testing scripts in either perl or python (powershell a plus) Be able to follow and understand ASP.net, C#, Ruby, Scala and Java programing languages and them.

associated runtime environments.

Navigate and assess industry leading DBMS such as Oracle, MSSQL, and mySQL.

Review security architecture design and configurations to include IDS, SIEM, Firewall, Web Proxies, endpoint protection etc. to determine their level of effectiveness and compliance.

Ability to use industry leading tools such as Metasploit, Burp Suite, Kali Linux, Nessus, AppDetective, Web Inspect, Acunetix, fortify – HANDS-ON EXPERIENCE required.

Communicate with the system owner, senior leadership, and developer regarding security considerations.

of the system engineering life cycle Develop and maintain security accreditation artifacts to include the Security Requirements Traceability Matrix (SRTM), System Security Plan (SSP), and others Manage system Plan of Actions and Milestones (POA&M) to include the drafting of expectations and waivers as appropriate Conduct assessments of system safeguards and controls and respond to external audits as required.

Interview system administrators and support personnel to extract system functionality narratives.

Control, label, virus scan and appropriately transfer data (upload/download) between information.

systems at varying classification levels Conduct research and perform security analysis on the impacts of system designs, modifications, and technological initiatives.

Minimum Experience: 10 years Minimum Education: bachelor’s degree

Systems Engineer, Principle

Job Summary:

The Systems Engineer, Principle is a senior-level position in the government contracting team. This role is responsible for designing, implementing, and maintaining complex systems for government clients with a focus on network security and testing. The incumbent will be expected to have advanced skills in system design, integration, testing, and network security, as well as expertise in various software and hardware technologies. Additionally, this position may lead or supervise other systems engineers and technical staff in the implementation and maintenance of systems.

Duties and Responsibilities:

Design and implement complex systems for government clients with a focus on network security and testing, including hardware, software, and network components.

Conduct system analysis to identify client requirements and develop technical solutions to meet those requirements while ensuring network security and testing.

Collaborate with other technical staff to integrate and test systems and ensure compliance with client specifications, industry standards, and network security protocols.

Conduct network security assessments and penetration testing to identify vulnerabilities in systems and networks and provide recommendations for remediation.

Identify and troubleshoot system and network problems and provide technical support to clients.

Develop and implement system security protocols and procedures to ensure the integrity and confidentiality of government data.

Provide technical guidance and expertise to other systems engineers and technical staff, including network security and testing methodologies.

Lead or supervise other systems engineers and technical staff in the implementation and maintenance of systems with a focus on network security and testing.

Stay current with emerging technologies and trends in system design, integration, testing, and network security, and continually improve technical skills and knowledge through professional development activities.

Qualifications:

Advanced technical skills in system design, integration, testing, network security, and various software and hardware technologies.

Strong knowledge of industry standards, protocols, and technologies, including TCP/IP, DNS, Active Directory, VMware, AWS, and others.

Experience with various operating systems, such as Windows, Linux, and Unix.

Strong analytical and problem-solving skills, with the ability to identify and troubleshoot system and network problems and vulnerabilities.

Strong communication and collaboration skills, with the ability to work effectively with clients, technical staff, and stakeholders.

Minimum Experience: 10 years Minimum Education: bachelor’s degree

SCA Test Engineer Level II

In support of these efforts, our Security Control Assessor Test Engineer will.

· Perform manual testing, vulnerability scans, and penetration testing.

· Perform analysis, web assessment software, vulnerability scanning, and penetration testing, and develop/deploy custom scripts.

· Apply knowledge of client/servers, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, Local Area Network (LAN), switches, and routers; Windows, Linux, Unix, and Mac OS X administration; VMware, Xen, Hyper V and other virtualization platforms.

· Evaluate information system security readiness and supports cybersecurity functions.

· Perform onsite and remote testing of FISMA requirements.

· Perform annual assessments that support the continuous monitoring strategy for all systems with ATO.

· Provide assessment support and site visits for information systems.

· Employ test plans and procedures tailored to the security controls of the system under test.

· Develop Body of Evidence Guidance, Rules of Engagement , Security Assessment Plan, and Assessment/Deliverable Schedules

Required Skills:

· US Citizenship

· Certifications such as Offensive Security Certified Expert (OSCE), Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), Offensive Security Wireless Professional (OSWP), GIAC Penetration Tester (GPEN), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), Licensed Penetration Tester (LPT), CEPT, CEH

· Experience with compliance and vulnerability scanning tools.

· Demonstrated experience in a simulated environment.

· Ability to use MS Office Suite to include Word, PowerPoint, and Excel.

· Superior communication skills, both written and oral.

· US Citizenship

· A U.S. Government TS/SCI Clearance

Minimum Experience: 5 years Minimum Education: bachelor’s degree

SCA Test Engineer Level III

In support of these efforts, our Security Control Assessor Test Engineer will.

· Perform manual testing, vulnerability scans, and penetration testing.

· Perform analysis, web assessment software, vulnerability scanning, and penetration testing, and develop/deploy custom scripts.

· Apply knowledge of client/servers, web hosting, web content servers, policy servers, directory servers, firewalls, WAN, MAN, Local Area Network (LAN), switches, and routers; Windows, Linux, Unix, and Mac OS X administration; VMware, Xen, Hyper V and other virtualization platforms.

· Evaluate information system security readiness and supports cybersecurity functions.

· Perform onsite and remote testing of FISMA requirements.

· Perform annual assessments that support the continuous monitoring strategy for all systems with ATO.

· Provide assessment support and site visits for information systems.

· Employ test plans and procedures tailored to the security controls of the system under test.

· Develop Body of Evidence Guidance, Rules of Engagement , Security Assessment Plan, and Assessment/Deliverable Schedules

Required Skills:

· US Citizenship

· Certifications such as Offensive Security Certified Expert (OSCE), Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), Offensive Security Wireless Professional (OSWP), GIAC Penetration Tester (GPEN), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), Licensed Penetration Tester (LPT), CEPT, CEH

· Experience with compliance and vulnerability scanning tools.

· Demonstrated experience in a simulated environment.

· Ability to use MS Office Suite to include Word, PowerPoint, and Excel.

· Superior communication skills, both written and oral.

· US Citizenship

· A U.S. Government TS/SCI Clearance

Minimum Experience: 5 years Minimum Education: bachelor’s degree

Job Title: Architect Responsibilities:

· Lead the design and development of the organization's systems architecture, ensuring alignment with business objectives and industry best practices.

· Evaluate and recommend technologies and tools for infrastructure enhancement, considering scalability, security, and performance.

· Collaborate with IT and development teams to integrate new technologies and systems into the existing infrastructure seamlessly.

· Conduct in-depth analysis of current systems to identify vulnerabilities, performance bottlenecks, and opportunities for improvement.

· Develop and maintain comprehensive documentation for system architecture, including diagrams, technical specifications, and operating procedures.

· Oversee the implementation of new systems, including planning, execution, and post-deployment support.

· Stay abreast of emerging technologies and industry trends, assessing their potential impact on the organization and suggesting adaptations to our technology stack accordingly.

· Serve as a technical lead and mentor for junior engineers, fostering a culture of technical excellence and continuous learning within the team.

· Facilitate communication between various stakeholders, including IT teams, developers, and business units, to ensure the effective and efficient realization of system architecture projects.

· Lead the troubleshooting and resolution of complex system issues, providing expert guidance and support to ensure minimal disruption to business operations.

Minimum Education: Bachelor's degree in Computer Science, Engineering, or a related field, advanced degree or professional certifications in systems architecture or engineering is highly desirable.

Minimum Experience: A minimum of 5 years of experience in systems architecture or a related field, with a proven track record of designing and implementing large-scale systems solutions.

Job Title: Senior Architect Responsibilities:

· Lead the design and development of the organization's systems architecture, ensuring alignment with business objectives and industry best practices.

· Evaluate and recommend technologies and tools for infrastructure enhancement, considering scalability, security, and performance.

· Collaborate with IT and development teams to integrate new technologies and systems into the existing infrastructure seamlessly.

· Conduct in-depth analysis of current systems to identify vulnerabilities, performance bottlenecks, and opportunities for improvement.

· Develop and maintain comprehensive documentation for system architecture, including diagrams, technical specifications, and operating procedures.

· Oversee the implementation of new systems, including planning, execution, and post-deployment support.

· Stay abreast of emerging technologies and industry trends, assessing their potential impact on the organization and suggesting adaptations to our technology stack accordingly.

· Serve as a technical lead and mentor for junior engineers, fostering a culture of technical excellence and continuous learning within the team.

· Facilitate communication between various stakeholders, including IT teams, developers, and business units, to ensure the effective and efficient realization of system architecture projects.

· Lead the troubleshooting and resolution of complex system issues, providing expert guidance and support to ensure minimal disruption to business operations.

Minimum Education: Bachelor's degree in Computer Science, Engineering, or a related field. An advanced degree or professional certifications in systems architecture or engineering is highly desirable.

Minimum Experience: A minimum of 10 years of experience in systems architecture or a related field, with a proven track record of designing and implementing large-scale systems solutions.

Job Title: IT Engineer Responsibilities:

· Install, configure, and maintain IT systems, including hardware, software, networks, and peripherals, ensuring reliable operation for fulfilling business objectives.

· Monitor system performance, troubleshoot issues, and ensure secure and efficient operation of IT infrastructure.

· Participate in the evaluation and deployment of new technologies, system upgrades, and software to enhance organizational productivity.

· Assist in the development and implementation of IT policies and procedures to ensure system integrity, security, and compliance with industry standards.

· Provide technical support to employees, addressing and resolving IT-related issues in a timely manner.

· Collaborate with team members on IT projects, contributing to the design, testing, and implementation phases to meet project goals.

· Maintain up-to-date knowledge of emerging tools and technologies, recommending innovations that can enhance system capabilities.

· Ensure data backups are performed regularly, conducting recovery tests to verify data integrity.

· Document IT procedures, configurations, and inventory, maintaining accurate records and system diagrams for reference.

· Assist in managing vendor relationships and service contracts to ensure cost-effective and efficient support for IT resources.

Minimum Education: Bachelor’s degree in Information Technology, Computer Science, or related field desired but not required.

Minimum Experience: At least 3 years of experience in IT support, system administration, or a related field.

Job Title: Project Manager Responsibilities:

· Lead the planning, execution, monitoring, and closure of projects, focusing on strict adherence to deadlines, budget constraints, and quality requirements.

· Coordinate cross-functional teams, managing both in-house staff and external contractors to ensure effective project delivery.

· Develop comprehensive project plans using advanced project management tools such as JIRA, Asana, or Microsoft Project to track progress accurately.

· Employ Agile, Scrum, or Waterfall methodologies as appropriate to ensure efficient project execution and delivery.

· Facilitate regular project status meetings and use platforms like Confluence for documentation and collaboration, ensuring all stakeholders are informed and engaged.

· Conduct detailed risk assessments and establish risk mitigation strategies to handle potential issues proactively.

· Manage project scopes, timelines, and costs effectively, utilizing tools like Smartsheet for enhanced data analysis and reporting capabilities.

· Implement robust communication channels and project tracking mechanisms, ensuring clarity and transparency with stakeholders at all levels.

· Provide detailed reports and updates to senior management using business intelligence tools such as Tableau for data visualization.

· Foster a culture of continuous improvement by mentoring team members in the latest project management techniques and technologies.

Minimum Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field; Master's degree or equivalent project management certification (e.g., PMP, PRINCE2) strongly preferred.

Minimum Experience: Minimum of 7 years of experience in project management, with at least 4 years in a managerial role within IT or cybersecurity.

Job Title: Security Engineer I - Cybersecurity Specialist Responsibilities:

· Assist in developing and implementing parts of the cybersecurity strategy, including secure coding practices, encryption methods, and incident response plans.

· Conduct analysis and monitor system vulnerabilities, threat landscapes, and external threats, making recommendations for improvements.

· Collaborate with IT and software development teams to assess and execute security enhancements and patches.

· Help maintain detailed documentation related to security architectures, operational protocols, and system schematics.

· Participate in security audits, vulnerability assessments, and penetration testing, and assist in reporting findings to leadership and suggesting improvements.

· Stay updated with the latest in cybersecurity innovations and practices, contributing to the integration of new solutions to enhance organizational security.

· Support cross-departmental collaboration on cybersecurity matters, promoting adherence to best practices and regulatory requirements.

· Assist in mentoring and guiding less experienced security personnel, helping to build a culture that values cybersecurity.

Minimum Education: Bachelor's degree in Computer Science, Information Security, or a closely related field is desired but not required.

Minimum Experience: At least 3 years of experience in the cybersecurity field, with involvement in supporting the design and analysis of security systems.

Job Title: Security Engineer II - Cybersecurity Specialist Responsibilities:

· Contribute to the development and execution of comprehensive cybersecurity strategies, including secure coding practices, encryption standards, and incident response plans.

· Perform detailed analysis and continuous monitoring of system vulnerabilities, threat landscapes, and potential breaches, providing recommendations for improvements.

· Work closely with IT and software development teams to evaluate and deploy security modifications and updates.

· Maintain and update documentation regarding security architectures, operational protocols, and system designs.

· Lead security audits, vulnerability assessments, and penetration testing, report findings to senior management, and recommend proactive measures.

· Keep abreast of the latest cybersecurity technologies and methods, advocating for the adoption of cutting-edge solutions to enhance security.

· Serve as a cybersecurity advisor within the organization, promoting compliance with best practices and regulatory standards.

· Mentor and support intermediate-level security staff, helping to cultivate a company-wide commitment to robust cybersecurity practices.

Minimum Education: Bachelor's degree in Computer Science, Information Security, or a related field is preferred.

Minimum Experience: A minimum of 5 years of experience in cybersecurity, demonstrating a solid track record in the development and operational management of security systems.

Job Title: Security Engineer III - Cybersecurity Specialist Responsibilities:

· Spearhead the formulation and execution of a holistic cybersecurity strategy, encapsulating secure coding protocols, encryption methodologies, and incident response frameworks.

· Perform rigorous analysis and perpetual monitoring of system susceptibilities, threat landscapes, and external incursions, offering recommendations for fortifications.

· Liaise with IT and software development contingents to evaluate and implement security amendments and patches.

· Curate and upkeep comprehensive documentation pertaining to security architectures, operational protocols, and system schematics.

· Direct and conduct security audits, vulnerability assessments, and penetration tests, conveying findings to leadership and proposing countermeasures.

· Remain at the forefront of cybersecurity innovations and methodologies, integrating avant-garde solutions to bolster organizational security.

· Function as a senior advisory resource across departments on matters of cybersecurity, advocating for best practices and regulatory adherence.

· Guide and nurture junior security personnel, fostering an organizational culture deeply aware of and committed to cybersecurity.

Minimum Education: Possess a Bachelor's degree in Computer Science, Information Security, or a closely related discipline highly desired. An advanced degree or professional certifications such as CISSP, CISM, or CEH are highly regarded.

Minimum Experience: Bring at least 10 years of proven experience in the cybersecurity domain, with a notable history in the design and analysis of security systems.

Job Title: Senior IT Engineer Responsibilities:

· Lead the planning, design, and implementation of IT infrastructure projects, ensuring they meet business requirements and are completed on time and within budget.

· Administer and optimize the organization's networks, servers, databases, and cloud computing resources to ensure high availability and performance.

· Develop and enforce IT policies, procedures, and best practices to maintain security standards and regulatory compliance.

· Oversee the deployment and integration of new technologies and system upgrades, ensuring minimal disruption to operations.

· Conduct thorough system and network audits to identify vulnerabilities; recommend and implement security enhancements.

· Serve as a key technical advisor to senior management, providing insights and recommendations on IT strategies and technologies that align with business goals.

· Manage vendor relationships, including negotiation of contracts and oversight of service level agreements (SLAs) to ensure vendor performance and cost-effectiveness.

· Lead, mentor, and develop IT staff, fostering a culture of continuous improvement and professional growth.

· Troubleshoot and resolve complex technical issues, providing expert-level support across the organization.

· Stay informed of the latest trends and advancements in information technology to drive innovation and efficiency within the organization.

Minimum Education: Bachelor’s degree in Information Technology, Computer Science, or a related field desired but not required. A Master's degree or relevant professional certifications (such as MCSE, CCNP, ITIL) is preferred.

Minimum Experience: A minimum of 8 years of experience in IT, with at least 3 years in a senior or leadership role, demonstrating successful management of IT infrastructure and projects.

GSA Pricing

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS eligible labor categories. If and / or when the contractor adds SCLS labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS matrix identifying the GSA labor category titles, the occupational code, SCLS labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.