MAS - Advanced Cybersecurity Experts LLC - 47QTCA24D0082

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class:

Contract number: 47QTCA24D0082

Contract period: April 19, 2024 through April 18, 2029

Advanced Cybersecurity Experts, LLC.

309 Briarwood Dr.

Leander, TX 78641 Phone Number: 254-458-0014 http://www.advancedcybersecurityllc.com

Contract administrator: Matt Lionheart Email: matt@advancedcybersecurityllc.com

Business size: Service Disabled-Veteran Owned Small Business

For more information on ordering, go to the following website: https://www.gsa.gov/schedules

Price list current as of Modification PS-0007 effective: 06/12/2025

Prices Shown Herein are Net (discount deducted)

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

OLM

Order-Level Materials

1b.

1c. See Below

2. Maximum order:

3. Minimum order: $100

4. Geographic coverage (delivery area). Worldwide

5. Point(s) of production (city, county, and State or foreign country). 309 Briarwood Drive Leander, Texas 78641

6. Government Net Prices (discounts already deducted.)

7. Quantity discounts. 4% single orders over $100,000

8. Prompt payment terms. 3% Net 15 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) Contact Contractor

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B. point(s). Destination

ACE

12a. Ordering address(es). 309 Briarwood Drive Leander, Texas 78641

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair. Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. ICT accessibility standards can be found at: https://www.Section508.gov/.

23. Unique Entity Identifier (UEI) number. J866DLWCTSG8

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

Key Responsibilities:

Develop and implement project plans, timelines, and budgets in collaboration with clients and stakeholders.

Manage project resources, including personnel, budget, and equipment, to ensure successful project completion.

Identify and manage project risks, issues, and dependencies to ensure timely and effective resolution.

Monitor project progress and performance, and report project status to clients and stakeholders.

Coordinate project activities across multiple teams and stakeholders, ensuring alignment with project goals and objectives.

Develop and maintain project documentation, including project plans, schedules, budgets, and status reports.

Ensure compliance with project management methodologies, standards, and best practices.

Qualifications:

Bachelor's or master's degree in Project Management, Information Technology, or a related field.

5+ years of experience in project management, preferably in IT projects.

Demonstrated ability to lead and manage projects of varying sizes and complexity.

Experience with project management methodologies, such as Agile, Waterfall, or Scrum.

Excellent communication, collaboration, and interpersonal skills.

Strong analytical, problem-solving, and decision-making skills.

Ability to work independently and collaboratively with cross-functional teams.

Certification in project management (e.g., PMP, Prince2) is preferred.

Key Responsibilities:

Design and implement IT networks, including LAN, WAN, and wireless networks, based on client requirements and industry best practices.

Install, configure, and maintain network hardware and software, including routers, switches, firewalls, and wireless access points.

Monitor and analyze network performance, identify and resolve network issues and bottlenecks, and optimize network performance.

Ensure network security and compliance with industry standards and regulations, such as HIPAA and NIST.

Develop and maintain network documentation, including network diagrams, configurations, and policies.

Collaborate with other IT teams and stakeholders to integrate network systems with other IT systems and applications.

Provide technical guidance and support to junior network engineers and IT staff.

Qualifications:

Bachelor's or master's degree in Computer Science, Information Technology, or a related field.

5+ years of experience in network engineering, preferably in a healthcare or government environment.

Strong understanding of network architecture, protocols, and technologies, such as TCP/IP, DNS, DHCP, VPN, and VLAN.

Experience with network hardware and software, including Cisco routers and switches, Palo Alto firewalls, and wireless access points.

Knowledge of network security principles and practices, such as authentication, encryption, and intrusion detection/prevention.

Excellent analytical, problem-solving, and communication skills.

Ability to work independently and collaboratively with cross-functional teams.

Certification in network engineering (e.g., CCNA, CCNP, JNCIA) is preferred.

Key Responsibilities:

Design and implement IT network security systems, including firewalls, intrusion detection/prevention systems, and virtual private networks (VPNs).

Monitor and analyze network traffic, identify and respond to security threats and vulnerabilities, and ensure compliance with security policies and regulations, such as HIPAA and NIST.

Conduct security audits and risk assessments, and develop and implement security controls and mitigation strategies.

Develop and maintain security documentation, including security policies, procedures, and incident response plans.

Collaborate with other IT teams and stakeholders to integrate security systems with other IT systems and applications.

Provide technical guidance and support to junior network security engineers and IT staff.

Qualifications:

Bachelor's or master's degree in Computer Science, Information Technology, or a related field.

5+ years of experience in network security engineering, preferably in a healthcare or government environment.

Strong understanding of network security principles and technologies, such as firewalls, intrusion detection/prevention, VPNs, and encryption.

Experience with network security hardware and software, such as Cisco ASA, Palo Alto firewalls, and Snort intrusion detection/prevention.

Knowledge of security compliance standards and regulations, such as HIPAA, NIST, and FISMA.

Excellent analytical, problem-solving, and communication skills.

Ability to work independently and collaboratively with cross-functional teams.

Certification in network security (e.g., CISSP, Security+) is preferred.

Key Responsibilities:

Design and implement Linux-based IT systems and applications, based on client requirements and industry best practices.

Install, configure, and maintain Linux servers and applications, including web servers, database servers, and application servers.

Monitor and analyze system performance, identify and resolve system issues and bottlenecks, and optimize system performance.

Ensure system security and compliance with industry standards and regulations, such as HIPAA and NIST.

Develop and maintain system documentation, including system configurations, policies, and procedures.

Collaborate with other IT teams and stakeholders to integrate Linux systems with other IT systems and applications.

Provide technical guidance and support to junior Linux engineers and IT staff.

Qualifications:

Bachelor's or master's degree in Computer Science, Information Technology, or a related field.

5+ years of experience in Linux system engineering, preferably in a healthcare or government environment.

Strong understanding of Linux system architecture, administration, and troubleshooting.

Experience with Linux server hardware and software, such as Apache web server, MySQL database server, and Tomcat application server.

Knowledge of Linux security principles and practices, such as user and group management, permissions, and firewalls.

Excellent analytical, problem-solving, and communication skills.

Ability to work independently and collaboratively with cross-functional teams.

Certification in Linux engineering (e.g., RHCE, LPIC) is preferred.

Key Responsibilities:

Manage and oversee the configuration, operation, and maintenance of the organization's IT network infrastructure, including routers, switches, firewalls, and other network devices.

Monitor and analyze network performance, identify and resolve network issues and bottlenecks, and optimize network performance.

Ensure network security and compliance with industry standards and regulations, such as HIPAA and NIST.

Develop and maintain network documentation, including network configurations, policies, and procedures.

Collaborate with other IT teams and stakeholders to integrate network systems with other IT systems and applications.

Provide technical guidance and support to network engineers and IT staff.

Manage network projects, including budgeting, scheduling, and resource allocation.

Qualifications:

Bachelor's or master's degree in Computer Science, Information Technology, or a related field.

8+ years of experience in network engineering and management, preferably in a healthcare or government environment.

Strong understanding of network architecture, administration, and troubleshooting.

Experience with network hardware and software, such as Cisco routers and switches, Palo Alto firewalls, and SolarWinds network monitoring.

Knowledge of network security principles and practices, such as access control, intrusion detection/prevention, and firewalls.

Excellent analytical, problem-solving, and communication skills.

Ability to work independently and collaboratively with cross-functional teams.

Certification in network engineering or management (e.g., CCNP, Network+) is preferred.

Key Responsibilities:

Design, develop, and maintain Python-based software applications and systems, based on client requirements and industry best practices.

Write high-quality, clean, and maintainable Python code.

Test and debug software applications and systems, and troubleshoot issues as they arise.

Collaborate with other IT teams and stakeholders to integrate Python applications with other IT systems and applications.

Ensure software security and compliance with industry standards and regulations, such as HIPAA and NIST.

Develop and maintain software documentation, including code comments, user manuals, and technical specifications.

Provide technical guidance and support to junior Python developers and IT staff.

Qualifications:

Bachelor's or master's degree in Computer Science, Information Technology, or a related field.

5+ years of experience in Python software development, preferably in a healthcare or government environment.

Strong understanding of Python programming language, including its data structures, algorithms, and design patterns.

Experience with Python frameworks such as Django, Flask, and Pyramid.

Knowledge of software development best practices, such as Agile methodologies, version control, and code review.

Excellent analytical, problem-solving, and communication skills.

Ability to work independently and collaboratively with cross-functional teams.

Familiarity with databases such as PostgreSQL, MySQL, or Oracle is preferred.

Key Responsibilities:

Design and implement cloud security architecture and policies that align with industry best practices and client requirements.

Implement security controls to protect cloud infrastructure, applications, and data.

Conduct security risk assessments and vulnerability assessments to identify and address potential security threats and risks.

Provide guidance on security-related issues to clients and internal teams.

Monitor and analyze security logs and events to identify potential security incidents and respond to them in a timely manner.

Collaborate with other IT professionals, including developers and network engineers, to ensure that security requirements are integrated into all aspects of the cloud environment.

Stay up-to-date on emerging cloud security threats, technologies, and trends and recommend best practices and solutions to mitigate them.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Security, or a related field.

Minimum of 5 years of experience in cloud security architecture and design.

Strong understanding of cloud computing technologies and security best practices.

Knowledge of security frameworks such as NIST and ISO 27001/2.

Experience with security technologies such as firewalls, intrusion detection and prevention systems, and data encryption.

Excellent communication and interpersonal skills, with the ability to work collaboratively with clients and internal teams.

Relevant security certifications, such as CISSP, CISM, or CCSK, are preferred.

Overall, the Cloud Security Architect will play a critical role in ensuring the security of cloud-based systems and applications. They bring expertise in cloud security architecture and design and work closely with clients to develop and implement comprehensive security solutions that protect against potential threats and risks. This position aligns with SIN 518210C and will provide cloud security services to government agencies and other organizations.

Key Responsibilities:

Implement and maintain DevSecOps tools and technologies to integrate security practices into the software development process and operations.

Work with development teams to identify security risks and vulnerabilities in the software development lifecycle, and implement controls to mitigate them.

Automate security testing and compliance checks to ensure that security is integrated into all aspects of the cloud environment.

Monitor and analyze security logs and events to identify potential security incidents and respond to them in a timely manner.

Collaborate with other IT professionals, including developers, network engineers, and security analysts, to ensure that security requirements are integrated into all aspects of the cloud environment.

Stay up-to-date on emerging cloud security threats, technologies, and trends and recommend best practices and solutions to mitigate them.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Security, or a related field.

Minimum of 5 years of experience in DevSecOps or related field.

Strong understanding of cloud computing technologies, security best practices, and DevOps methodologies.

Experience with DevSecOps tools and technologies, such as Jenkins, GitLab, Ansible, and Terraform.

Knowledge of security frameworks such as NIST and ISO 27001/2.

Experience with security technologies such as firewalls, intrusion detection and prevention systems, and data encryption.

Excellent communication and interpersonal skills, with the ability to work collaboratively with development teams and internal teams.

Relevant security certifications, such as CISSP, CISM, or CCSK, are preferred.

Overall, the DevSecOps Engineer will play a critical role in integrating security practices into the software development process and operations in a continuous and automated manner. They bring expertise in DevSecOps tools and technologies, and work closely with development teams to ensure that security requirements are integrated into all aspects of the cloud environment. This position aligns with SIN 518210C and will provide cloud and cloud-related IT professional services to government agencies and other organizations.

Key Responsibilities:

Design, implement, and maintain cloud-based solutions and services for clients using cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Work with other IT professionals to ensure that cloud infrastructure is secure, reliable, and scalable.

Migrate legacy applications and infrastructure to the cloud and optimize them for performance and cost.

Implement and maintain cloud-based tools and technologies such as Kubernetes, Docker, and Ansible.

Troubleshoot and resolve issues related to cloud infrastructure and services.

Monitor cloud infrastructure performance and capacity and proactively identify potential issues.

Maintain cloud infrastructure security by implementing best practices, security controls, and compliance requirements.

Automate infrastructure deployment, configuration, and management using infrastructure-as-code (IAC) tools and techniques.

Collaborate with other IT professionals, including developers, network engineers, and security analysts, to ensure that cloud infrastructure meets business requirements.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field.

Minimum of 3 years of experience in cloud engineering or related field.

Strong understanding of cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Experience with cloud-based tools and technologies such as Kubernetes, Docker, and Ansible.

Key Responsibilities:

Monitor cloud infrastructure and services to ensure that they are operational and performing optimally for clients.

Respond to incidents related to cloud infrastructure and services and troubleshoot issues.

Implement and maintain tools and technologies to automate cloud operations, such as monitoring and logging tools.

Automate infrastructure deployment, configuration, and management using infrastructure-as-code (IAC) tools and techniques.

Collaborate with other IT professionals, including developers, network engineers, and security analysts, to ensure that cloud infrastructure meets business requirements.

Maintain cloud infrastructure security by implementing best practices, security controls, and compliance requirements.

Develop and maintain documentation related to cloud operations processes and procedures.

Participate in on-call rotations to respond to incidents outside of normal business hours.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field.

Minimum of 3 years of experience in cloud operations or related field.

Strong understanding of cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Experience with cloud-based tools and technologies for monitoring, logging, and automation.

Strong troubleshooting and problem-solving skills.

Key Responsibilities:

Design, implement, and maintain cloud-based network infrastructure for clients using cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Work with other IT professionals to ensure that cloud network infrastructure is secure, reliable, and scalable.

Implement and maintain cloud-based tools and technologies to automate network operations, such as routing, load balancing, and firewalls.

Troubleshoot and resolve issues related to cloud network infrastructure and services.

Monitor cloud network infrastructure performance and capacity and proactively identify potential issues.

Maintain cloud network infrastructure security by implementing best practices, security controls, and compliance requirements.

Automate network deployment, configuration, and management using infrastructure-as-code (IAC) tools and techniques.

Collaborate with other IT professionals, including developers, network engineers, and security analysts, to ensure that cloud infrastructure meets business requirements.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field.

Minimum of 3 years of experience in cloud network engineering or related field.

Strong understanding of cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Experience with cloud-based tools and technologies for network automation and security, such as VPCs, VPNs, and security groups.

Experience with network routing, load balancing, and firewalls in a cloud environment.

Strong troubleshooting and problem-solving skills.

Key Responsibilities:

Design, implement, and maintain cloud-based systems infrastructure for clients using cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Work with other IT professionals to ensure that cloud systems infrastructure is secure, reliable, and scalable.

Implement and maintain cloud-based tools and technologies to automate systems operations, such as server provisioning, configuration management, and monitoring.

Troubleshoot and resolve issues related to cloud systems infrastructure and services.

Monitor cloud systems infrastructure performance and capacity and proactively identify potential issues.

Maintain cloud systems infrastructure security by implementing best practices, security controls, and compliance requirements.

Automate systems deployment, configuration, and management using infrastructure-as-code (IAC) tools and techniques.

Collaborate with other IT professionals, including developers, network engineers, and security analysts, to ensure that cloud infrastructure meets business requirements.

Minimum Qualifications:

Bachelor's degree in Computer Science, Information Technology, or a related field.

Minimum of 3 years of experience in cloud systems engineering or related field.

Strong understanding of cloud infrastructure platforms such as AWS, Azure, or Google Cloud.

Experience with cloud-based tools and technologies for systems automation and security, such as configuration management tools, monitoring tools, and security groups.

Experience with server provisioning, configuration management, and monitoring in a cloud environment.

Strong troubleshooting and problem-solving skills.

Key Responsibilities:

Lead cloud-based projects from initiation to closure, ensuring that projects are completed on time, within budget, and meet business requirements.

Plan and execute cloud projects, working closely with other IT professionals, stakeholders, and vendors.

Ensure that cloud projects align with organizational goals and strategies, and are consistent with best practices and industry standards.

Manage project resources, risks, and issues, and provide regular status updates to project stakeholders and sponsors.

Develop and maintain project plans, schedules, budgets, and other project artifacts.

Ensure that cloud infrastructure meets security and compliance requirements, and work with security and compliance professionals to mitigate risks and ensure compliance.

Collaborate with other IT professionals, including cloud architects, developers, network engineers, and security analysts, to ensure that cloud infrastructure meets business requirements.

Minimum Qualifications:

Bachelor's degree in Project Management, Business Administration, or a related field.

Minimum of 5 years of experience in project management, with at least 3 years of experience managing cloud-based projects.

The Cybersecurity Project Manager oversees the planning, execution, and delivery of security‑focused initiatives, ensuring they finish on time, within scope, and on budget while meeting stringent technical and regulatory requirements. Partnering with cross‑functional teams—security architects and engineers, IT operations, legal/compliance, and business stakeholders—the Project Manager drives alignment between project outcomes and the organization’s broader cybersecurity strategy.

Role Overview Drawing on strong project‑management discipline and deep familiarity with cybersecurity frameworks, the Cybersecurity Project Manager creates detailed project plans, allocates resources, tracks milestones, and manages risks through completion. Clear, consistent communication keeps all parties informed of progress, dependencies, and emerging issues. When obstacles arise, the Project Manager coordinates rapid resolution, balancing technical constraints with business priorities and regulatory obligations.

Key Responsibilities Project Planning & Initiation Develop comprehensive charters, schedules, and budgets that define scope, deliverables, success criteria, and governance.

Align project objectives with organizational security roadmaps, compliance mandates, and risk‑management goals.

Team Coordination & Resource Management Assemble and guide cross‑functional teams, clarifying roles, responsibilities, and dependencies.

Secure and manage internal and external resources (staff, technology, vendors) to meet project demands.

Execution & Monitoring Lead stand‑ups, status reviews, and steering‑committee updates; track progress against KPIs and key milestones.

Maintain project artifacts in PMO tools (e.g., Jira, MS Project, Smartsheet) and ensure documentation accuracy.

Risk & Issue Management Identify, assess, and prioritize risks (technical, operational, compliance, financial); develop mitigation and contingency plans.

Escalate critical blockers promptly and facilitate cross‑team problem solving.

Budget & Scope Control Monitor expenditures, handle change requests, and adjust plans to maintain financial and scope integrity.

Compliance & Quality Assurance Ensure deliverables adhere to relevant security frameworks and standards (e.g., NIST CSF/800‑53, ISO 27001, PCI DSS, GDPR).

Coordinate audits, quality checks, and acceptance testing before hand‑off to operations teams.

Stakeholder Communication Provide transparent, concise updates—dashboards, presentations, executive summaries—that highlight status, risks, and return on investment.

Act as primary liaison among security leadership, technology owners, and business sponsors.

Continuous Improvement Evaluate project outcomes, capture lessons learned, and refine delivery processes and playbooks for future initiatives.

Stay current on emerging cybersecurity threats, technologies, and project‑management best practices; apply insights to new projects.

Ideal Candidate Profile Proven success managing complex, multi‑workstream cybersecurity or IT risk projects.

Strong command of project‑management methodologies (Agile, Scrum, Waterfall, or hybrid) and tools.

Solid understanding of security principles, controls, and compliance frameworks.

Exceptional communication, negotiation, and leadership skills, with the ability to influence at all organizational levels.

Adept at juggling multiple initiatives in fast‑paced, dynamic environments and adapting to shifting priorities.

The Cybersecurity Project Manager oversees the planning, execution, and delivery of security‑focused initiatives, ensuring they finish on time, within scope, and on budget while meeting stringent technical and regulatory requirements. Partnering with cross‑functional teams—security architects and engineers, IT operations, legal/compliance, and business stakeholders—the Project Manager drives alignment between project outcomes and the organization’s broader cybersecurity strategy.

Role Overview Drawing on strong project‑management discipline and deep familiarity with cybersecurity frameworks, the Cybersecurity Project Manager creates detailed project plans, allocates resources, tracks milestones, and manages risks through completion. Clear, consistent communication keeps all parties informed of progress, dependencies, and emerging issues. When obstacles arise, the Project Manager coordinates rapid resolution, balancing technical constraints with business priorities and regulatory obligations.

Key Responsibilities Project Planning & Initiation Develop comprehensive charters, schedules, and budgets that define scope, deliverables, success criteria, and governance.

Align project objectives with organizational security roadmaps, compliance mandates, and risk‑management goals.

Team Coordination & Resource Management Assemble and guide cross‑functional teams, clarifying roles, responsibilities, and dependencies.

Secure and manage internal and external resources (staff, technology, vendors) to meet project demands.

Execution & Monitoring Lead stand‑ups, status reviews, and steering‑committee updates; track progress against KPIs and key milestones.

Maintain project artifacts in PMO tools (e.g., Jira, MS Project, Smartsheet) and ensure documentation accuracy.

Risk & Issue Management Identify, assess, and prioritize risks (technical, operational, compliance, financial); develop mitigation and contingency plans.

Escalate critical blockers promptly and facilitate cross‑team problem solving.

Budget & Scope Control Monitor expenditures, handle change requests, and adjust plans to maintain financial and scope integrity.

Compliance & Quality Assurance Ensure deliverables adhere to relevant security frameworks and standards (e.g., NIST CSF/800‑53, ISO 27001, PCI DSS, GDPR).

Coordinate audits, quality checks, and acceptance testing before hand‑off to operations teams.

Stakeholder Communication Provide transparent, concise updates—dashboards, presentations, executive summaries—that highlight status, risks, and return on investment.

Act as primary liaison among security leadership, technology owners, and business sponsors.

Continuous Improvement Evaluate project outcomes, capture lessons learned, and refine delivery processes and playbooks for future initiatives.

Stay current on emerging cybersecurity threats, technologies, and project‑management best practices; apply insights to new projects.

Ideal Candidate Profile Proven success managing complex, multi‑workstream cybersecurity or IT risk projects.

Strong command of project‑management methodologies (Agile, Scrum, Waterfall, or hybrid) and tools.

Solid understanding of security principles, controls, and compliance frameworks.

Exceptional communication, negotiation, and leadership skills, with the ability to influence at all organizational levels.

Adept at juggling multiple initiatives in fast‑paced, dynamic environments and adapting to shifting priorities.

The Cybersecurity Administrator manages and enhances the security of an organization’s information systems and data. Charged with configuring, monitoring, and maintaining security infrastructure, this role enforces security policies, performs regular audits, and responds swiftly to incidents—ensuring continuous protection of networks, servers, cloud workloads, and endpoints.

Role Overview Acting as a hands‑on guardian of day‑to‑day security operations, the Administrator deploys and tunes controls such as firewalls, intrusion‑detection / prevention systems (IDS / IPS), and security‑information and event‑management (SIEM) platforms. Core duties include user‑access governance, log analysis, vulnerability management, and compliance reporting. By staying ahead of emerging threats and industry best practices, the Administrator drives continuous improvement of the organization’s security posture.

Key Responsibilities Security Infrastructure Management Configure, manage, and optimize security technologies (firewalls, IDS/IPS, EDR, SIEM, VPNs, web‑/email‑security gateways).

Maintain up‑to‑date signatures, policies, and firmware; automate routine maintenance where practical.

Monitoring & Detection Monitor system and network activity for anomalous behavior, attacks, and policy violations.

Correlate logs and alerts within SIEM dashboards; escalate and investigate potential incidents.

Access Control & Policy Enforcement Administer identity‑ and access‑management (IAM) workflows, least‑privilege models, and privileged‑access solutions.

Enforce security policies, standards, and configuration baselines across on‑prem and cloud environments.

Audit & Compliance Conduct periodic security audits, vulnerability assessments, and configuration reviews.

Document findings, track remediation, and generate reports to satisfy regulatory or framework requirements (e.g., ISO 27001, NIST CSF, SOC 2, PCI DSS).

Incident Response Support Respond to security alerts, perform triage and initial containment, and coordinate with incident‑response teams for full remediation.

Perform post‑incident analysis and recommend control improvements to prevent recurrence.

Continuous Improvement Stay current with evolving threats, patches, and best practices; propose and implement security enhancements.

Contribute to the development and refinement of security policies, standard operating procedures, and playbooks.

Documentation & Reporting Maintain detailed records of incidents, audits, configurations, and change‑control activities.

Provide clear status updates and metrics to leadership and cross‑functional stakeholders.

The Cybersecurity Engineer designs, implements, and maintains the security infrastructure that protects an organization’s information systems from evolving cyber threats. Working hand‑in‑hand with IT and security teams, the engineer develops and deploys advanced controls—ensuring reliable defense of networks, applications, and data across on‑premises and cloud environments.

Role Overview This hands‑on position architects and manages safeguards such as firewalls, encryption schemes, endpoint‑protection platforms, and intrusion‑detection / prevention systems (IDS / IPS). Routine duties include comprehensive security assessments, vulnerability remediation, and continuous monitoring to keep pace with emerging threats. Beyond the technical work, the engineer helps craft security policies, champions secure‑coding and hardening practices, and delivers awareness training that embeds a security‑first mindset across the organization.

Key Responsibilities Security Architecture & Deployment Design, implement, and tune security infrastructure (firewalls, VPNs, encryption, IDS/IPS, EDR, CASB, WAF, etc.).

Integrate security controls into hybrid and multi‑cloud platforms.

Assessment & Hardening Conduct penetration tests, configuration reviews, and vulnerability assessments; track findings to closure.

Implement compensating controls and automate hardening baselines (e.g., CIS Benchmarks, STIGs).

Monitoring & Response Enablement Develop detection use‑cases, log pipelines, and SIEM dashboards to surface anomalous activity.

Collaborate with incident‑response teams to investigate, contain, and eradicate threats.

Compliance & Documentation Ensure solutions align with relevant frameworks and regulations (e.g., NIST SP 800‑53, ISO 27001, PCI DSS, GDPR).

Maintain detailed records of architectures, configurations, and security incidents.

Policy & Process Development Contribute to the creation and refinement of security standards, secure‑coding guidelines, and hardening procedures.

Provide subject‑matter expertise on system designs, DevSecOps pipelines, and change‑control processes.

Education & Advocacy Deliver security awareness training and technical workshops for developers, administrators, and business users.

Mentor junior engineers and promote a culture of shared responsibility for security.

Continuous Improvement Track threat‑intelligence feeds and security research to anticipate new attack vectors.

Recommend and pilot emerging technologies that enhance detection, prevention, and response capabilities.

The Cybersecurity Architect is a strategic, high‑level role responsible for designing and overseeing the implementation of comprehensive security solutions that protect an organization’s information systems. Acting as the bridge between business objectives and technical security controls, this position develops enterprise‑wide security architectures aligned with overall IT strategy, ensuring robust protection for networks, systems, applications, and data. The Architect partners with executives, project teams, and external vendors to embed security seamlessly into every layer of the infrastructure.

Role Overview The Architect leads the design of advanced security frameworks that address current risks and anticipate future threats. Core activities include risk assessments, requirements gathering, control selection, and solution architecture. The role evaluates and approves security products and technologies, maintains detailed design documentation, and ensures that all implementations comply with relevant regulations and internal standards. In addition, the Architect provides strategic guidance to senior leadership and engineering teams, cultivates a security‑first mindset, and continuously tunes the security roadmap as the threat landscape evolves.

Key Responsibilities Design and Governance Create and maintain enterprise security architectures that align with organizational IT and business objectives.

Establish security reference models, patterns, and blueprints for consistent, repeatable deployments.

Risk & Requirements Conduct risk and impact assessments to identify security requirements across projects and platforms.

Translate business needs and compliance obligations into technical security controls.

Solution Development Develop and oversee implementation plans that address identified vulnerabilities and gaps.

Evaluate, select, and integrate security products, services, and cloud controls into the tech stack.

Compliance & Documentation Ensure all architectures comply with industry regulations (e.g., ISO 27001, NIST, PCI DSS, GDPR).

Produce and maintain detailed architecture diagrams, standards, and design documents.

Strategic Advisory Advise senior management and engineering teams on security best practices and emerging threats.

Provide guidance on secure design, development pipelines, and DevSecOps integration.

Culture & Enablement Champion a security‑first culture through training, awareness, and stakeholder engagement.

Collaborate with incident‑response and operations teams to refine detection and response capabilities.

Continuous Improvement Monitor the evolving threat landscape, assessing new technologies and frameworks.

Iterate on security roadmaps to enhance resilience, scalability, and operational efficiency.

The Cybersecurity Threat Hunter is a specialized role focused on proactively identifying and mitigating cyber threats to an organization’s information systems. This position relies on advanced threat‑detection and analytical techniques—leveraging cutting‑edge tools to uncover potential security breaches before they can cause harm. The Threat Hunter partners closely with incident‑response teams to ensure swift, effective containment and remediation of any threats discovered.

Role Overview A Threat Hunter’s core mission is to actively seek out cyber threats that evade traditional security controls. Typical daily work includes deep analysis of network traffic, system logs, and other telemetry to spot suspicious behavior or indicators of compromise. By combining behavioral analytics with curated threat‑intelligence feeds, they expose sophisticated attacks that automated defenses might miss. The role also entails continuously tuning and creating detection rules and signatures to enhance the organization’s overall security posture.

Beyond detection, Threat Hunters drive incident response, root‑cause analysis, and long‑term mitigation—sharing insights across the security team and staying ahead of emerging attack techniques through ongoing research and professional development.

Key Responsibilities Proactively hunt for cyber threats that bypass conventional security safeguards.

Analyze network traffic, endpoint telemetry, system logs, and other data sources for anomalous or malicious activity.

Perform behavioral analysis and correlate threat‑intelligence data to uncover advanced, stealthy attacks.

Develop, refine, and maintain custom detection rules, signatures, and analytics to increase visibility and reduce dwell time.

Collaborate with incident‑response teams to contain, eradicate, and recover from security incidents.

Conduct root‑cause analyses and recommend preventive controls to avert recurrence.

Document threat‑hunting methodologies, findings, and lessons learned; present actionable insights to stakeholders.

Stay current with emerging threats, vulnerabilities, and adversary tradecraft; integrate new knowledge into hunting playbooks.

Provide strategic guidance on threat‑hunting best practices, tools, and metrics.

image1.PNG