MAS - Exocyber, Inc. - 47QTCA24D00CC

GENERAL SERVICES ADMINISTRATION FEDERAL ACQUISITION SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE FSS PRICE LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!, a menu-driven database system. The Internet address for

GSA Advantage! is http://www.gsaadvantage.gov

MULTIPLE AWARD SCEHDULE (MAS)

FEDERAL SUPPLY SCHEDULE: PROFESSIONAL SERVICES

CONTRACT NUMBER:

47QTCA24D00CC

PERIOD COVERED BY CONTRACT:

July 10, 2024 – July 09, 2029

Exocyber, Inc.

3033 Wilson Boulevard, Suite 700

Arlington, VA, 22201

(571) 308-5374 www.exocyber.com

ExoCyber, Inc. GSA MAS Commercial Price List Date: July 10, 2024

Contractor's Administration Source:

Daniel O’Conner, CFO; (571) 308-5374 doconnor@exocyber.com

Michael Perch, Contract Administrator; (703) 286-5426 mperch@roadmapc.com

General Services Administration Management Services Center Acquisition Division

Business Size:

Small Business

For more information on ordering on ordering go to the following website: https://www.gsa.gov/ schedules.

2 | Contract # 47QTCA24D00CC

RELEASABLE TO THE PUBLIC

Approved for Release: July 10, 2024

TABLE OF CONTENTS

GSAAWARDED TERMS AND CONDITIONS (Exocyber, Inc.) 3

1a. AWARDED SPECIAL ITEM NUMBER 3

2. MAXIMUM ORDER 3

3. MINIMUM ORDER 3

4. GEOGRAPHIC COVERAGE (DELIVERY AREA) 3

5. POINT(S) OF PRODUCTION 3

6. PRICES HEREIN ARE SET 3

7. QUANTITY DISCOUNTS 3

8. PROMPT PAYMENT TERMS 3

9. FOREIGN ITEMS (LIST ITEMS BY COUNTRY OF ORIGIN 4

10. TIME OF DELIVERY 4

11. F.O.B POINT(S 4

12. ORDERING ADDRESS (ES) 4

13. PAYMENTADDRESS (ES) 4

14. WARRANTY PROVISION 4

15. EXPORT PACKAGING CHARGES 4

16. TERMS AND CONDITIONS OF RENATAL, MAINTANANCE, AND REPAIR

(IF APPLICABLE) 4

17. TERMS AND CONDITIONS OF INSTALLATIONS (IF APPLICABLE) 4

18a. TERMS AND CONDITIONS OF REPAIR PARTS INDICATING DATE OF PARTS 4

19. LIST OF SERVICE AND DISTRIBUTION POINTS (IF APPLICABLE) 4

20. LIST OF PARTICIPATING DEALERS (IF APPLICABLE 4

21. PREVENTIVE MAINTENANCE (IF APPLICABLE 4

22a. ENVIRONMENTAL ATTRIBUTES, e.g., RECYCLED CONTENT, ENERGY EFFICIENCY, AND/OR REDUCED POLLUTANTS 5

23. UNIQUE ENTITY IDENTIFIER (UEI) NUMBER 5

24. NOTIFICATION REGARDING REGISTRATION IN SYSTEM FOR AWARD

MANAGEMENT (SAM) DATABASE 5

3 | Contract # 47QTCA24D00CC

GSA AWARDED TERMS AND CONDITIONS

TABLE OF AWARDED SPECIAL ITEM NUMBERS (SINs)

1a. AWARDED SPECIAL ITEM NUMBERS:

SIN 518210C: Cloud Computing and Cloud Related IT Professional Services SIN 541611: Management and Financial Consulting, Acquisition and Grants Management Support, and Business Program and Project Management Services SIN 54151S: Information Technology Professional Services

1b. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s): 105-002, 577-001

1c. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract.

2. MAXIMUM ORDER:

SIN 54151S: $500,000

SIN 518210C: $500,000

SIN 541611: $500,000

3. MINIMUM ORDER:

$100.00

4. GEOGRAPHIC COVERAGE (DELIVERY AREA):

SIN 54151S: U - 50 St,DC,Territ.

SIN 518210C: U - 50 St,DC,Territ.

SIN 541611: U - 50 St,DC,Territ.

5. POINT(S) OF PRODUCTION:

3033 Wilson Boulevard, Suite 700 Arlington, VA, 22201

6. PRICES HEREIN ARE SET.

Government Net Prices (discounts already deducted.)

7. QUANTITY DISCOUNTS:

1%, for Single orders over $350,000

8. PROMPT PAYMENT TERMS:

1% 10 Days, NET 30

4 | Contract # 47QTCA24D00CC

9. FOREIGN ITEMS

Not applicable.

10a. TIME OF DELIVERY: Specified on the Task Order

10b. Expedited Deliver: Negotiated at task order level

10c. Overnight and 2-day delivery: Negotiated at task order level

10d. Urgent Requirements: Negotiated at task order level

11. F.O.B POINT(S): Destination

12a. ORDERING ADDRESS (ES):

3033 Wilson Boulevard, Suite 700 Arlington, VA, 22201

12b. Ordering Procedures: See Federal Acquisition Regulation (FAR) 8.405-3

13. PAYMENT ADDRESS (ES):

3033 Wilson Boulevard, Suite 700 Arlington, VA, 22201

14. WARRANTY PROVISION:

Not applicable.

15. EXPORT PACKAGING CHARGES:

Not applicable.

16. TERMS AND CONDITIONS OF RENATAL, MAINTANANCE, AND REPAIR (IF

APPLICABLE)

17. TERMS AND CONDITIONS OF INSTALLATIONS: (IF APPLICABLE)

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices. Not applicable.

18b. Terms and conditions for any other services. Not applicable.

19. List of service and distribution points. Not applicable.

20. List of participating dealers. Not applicable.

21. Preventive maintenance. Not applicable.

5 | Contract # 47QTCA24D00CC

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not applicable.

22b. If applicable, indicate that Section 508 compliance information is available on Information and Communications Technology (ICT) supplies and services and show where full details can be found (e.g. contractor’s website or other location.) The ICT standards can be found at:

www.Section508.gov/. Not applicable.

23. Unique Entity Identifier (UEI) number.

UEI Number: YFVVTA2B5K64

24. Notification regarding registration in System for Award Management (SAM) database.

Contractor registered and active in SAM

The Service Contract Labor Standards, formerly the Service Contract Act (SCA), apply to this contract and it includes SCLS applicable labor categories. Labor categories and fixed price services marked with a (**) in this pricelist are based on the U.S. Department of Labor Wage Determination Number(s) identified in the SCLS/SCA matrix. The prices awarded are in line with the geographic scope of the contract (i.e., nationwide).

6 | Contract # 47QTCA24D00CC

LABOR CATEGORY DESCRIPTION WITH FUNCTIONAL RESPONSIBILITIES MINIMUM

EDUCATION AND YEARS OF EXPERIENCE

Labor Category: IT Program Manager

Years of Experience: 8 Years

Education: Master’s Degree

Experience: Possesses at least eight years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Master’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Directs and coordinates the integrated activities of projects which are engaged in the planning and development, maintenance, reengineering, securing, or exploitation of IT network systems. This includes directing, coordinating, and facilitating multiple development, reengineering, process improvement, and operational initiatives related to various IT network systems. Provides strategic, expert advice and consultation on the design and implementation of various projects. Supervises project staff and a variety of other functional area staff, as temporarily assigned to work with the project in question.

Establishes and implements short- and long-range organizational goals, objectives, policies, and operating procedures; monitors and evaluates program effectiveness; effects changes required for improvement. Participates on and/or facilitates various committees and reengineering teams; serves on the project planning and policy-making committees.

Designs and directs change management programs and activities to ensure smooth adoption of process and system changes.

Interactively communicates with the client and keeps the client apprised of the progress of project initiatives. Proactively engages with internal teams and the client to identify and resolve potential and actual issues; identify, communicate, and implement appropriate solutions and resolutions to issues. Selects and directs the activities of consultants and subcontractors engaged in providing professional support to project activities. Develops integrated project plans, implementation schedules, and cost estimates for projects;

prepares and manages project budgets and performs periodic cost and productivity analyses. Represents the project to various institutional divisions and components as well as to various external entities, as appropriate. Communicates regularly with executive management and administration regarding the status of current project initiatives; obtains executive guidance and approval as required to advance initiatives. Performs miscellaneous job-related duties as assigned by client.

7 | Contract # 47QTCA24D00CC

Labor Category: Network Engineer III

Years of Experience: 5 Years

Education: Bachelor’s Degree

Experience: Possesses at least five years of experience as a software engineer/network operator in programs and contracts of similar scope, type, and complexity. Master’s degree in computer science or related discipline from an accredited college or university is required with relevant certifications and experience. Possesses an appropriate security clearance required to conduct the work.

Duties: Manages overall system-level support of a multi-user operating system, hardware and software tools, including installation, configuration, maintenance and support of these systems. Collects information to analyze and evaluate existing or proposed systems. Aids in customizing, upgrading, integrating, and testing software for users. Installs, tests, maintains and supports operating system software and hardware. Troubleshoots and resolves hardware, software, and connectivity problems, including user access and component configuration. Documents projects and writes user instructions. Leads/manages a team of IT Specialists to meet program/network requirements. Leads data gathering, research, and analysis while conducting threat, vulnerability, risk, and maturity assessments. Applies critical thinking, conducts gap analysis, develops and implements plans for the improvement of the risk management-related program and contribute to constant innovation and improvement. Performs vulnerability scans of network enclaves. Maintains knowledge of emerging threats, vulnerabilities, and intelligence within the cybersecurity field to ensure remediation against known threats. Assists with vulnerability remediation, as necessary.

Conducts analysis results to identify high risk vulnerabilities impacting the network and ensure proper vulnerability management security postures. Performs and troubleshoots network and host vulnerability scanners. Maintains knowledge of applicable computer network defense (CND) policies, regulations, and compliance documents. Documents policies and procedures for the use of vulnerability assessment tools and methodologies.

Evaluates cyber security risks (external & internal threats, platform & application vulnerabilities, data protection, etc.), testing controls designed to mitigate risk, communicates issues and findings to management, devises solutions for business improvements, and follows up on corrective actions. Participates on and leads professional teams to execute technical audit projects focused on evaluating the effectiveness of cyber security governance, tools and operations, may evaluate the design, effectiveness, and efficiency of information technology and security processes, procedures, and technical controls including solution implementations, identifies and addresses systemic gaps in cyber security risk management. Develops data analysis and applies leading edge and other automated tools to provide management with proper context of potential exposure to control weaknesses. Collaborate with product, engineering and security practitioners to measure the effectiveness of the secure software development lifecycle. Exploits common vulnerabilities and misconfigurations associated with operating systems, protocols and network security services, assists with procuring, managing, and training for operational infrastructure associated with red team “attack platforms.” Conducts planning and executes red teaming, penetration testing, and or Capture the Flag events. Researches various cyber actor tactics, techniques, and procedures (TTP), organizational structures, capabilities,personas, and environments, and integrates findings into cyber red teaming or penetration test operations.

Develop and utilize testing methodology for threat emulation and vulnerability validation.

Provide expertise in TTP development for emulation of cyber adversaries. Develops and conducts training on information security, best practices, current tools, systems and

8 | Contract # 47QTCA24D00CC applications. Develops and conducts training on network intrusions, digital forensics, and basic and advance forensics examinations, including hands-on training.

Labor Category: Network Engineer II

Years of Experience: 3 Years

Education: Bachelor’s Degree

Experience: Possesses at least three years of experience as a software engineer/network operator in programs and contracts of similar scope, type, and complexity. Bachelor’s degree in computer science or related discipline from an accredited college or university is required with relevant certifications and experience. Possesses an appropriate security clearance required to conduct the work.

Duties: Supports overall system-level support of a multi-user operating system, hardware and software tools, including installation, configuration, maintenance and support of these systems. Collects information to analyze and evaluate existing or proposed systems. Aids in customizing, upgrading, integrating, and testing software for users. Installs, tests, maintains and supports operating system software and hardware. Troubleshoots and resolves hardware, software, and connectivity problems, including user access and component configuration. Documents projects and writes user instructions.

Supports a team of IT Specialists to meet program/network requirements. Supports data gathering, research, and analysis while conducting threat, vulnerability, risk, and maturity assessments. Applies critical thinking, conducts gap analysis, develops and implements plans for the improvement of the risk management-related program and contribute to constant innovation and improvement; may lead/manage a team of IT specialists. Performs vulnerability scans of network enclaves. Maintains knowledge of emerging threats, vulnerabilities, and intelligence within the cybersecurity field to ensure remediation against known threats. Assists with vulnerability remediation, as necessary.

Conducts analysis results to identify high risk vulnerabilities impacting the network and ensure proper vulnerability management security postures. Performs and troubleshoots network and host vulnerability scanners. Maintains knowledge of applicable computer network defense (CND) policies, regulations, and compliance documents. Documents policies and procedures for the use of vulnerability assessment tools and methodologies. Evaluates cyber security risks (external & internal threats, platform & application vulnerabilities, data protection, etc.), testing controls designed to mitigate risk, communicates issues and findings to management, devises solutions for business improvements, and follows up on corrective actions. Participates on and leads professional teams to execute technical audit projects focused on evaluating the effectiveness of cyber security governance, tools and operations, may evaluate the design, effectiveness, and efficiency of information technology and security processes, procedures, and technical controls including solution implementations, identifies and addresses systemic gaps in cyber security risk management.

Develops data analysis and applies leading edge and other automated tools to provide management with proper context of potential exposure to control weaknesses. Collaborate with product, engineering and security practitioners to measure the effectiveness of the secure software development lifecycle. Exploits common vulnerabilities and misconfigurations associated with operating systems, protocols and network security services, assists with procuring, managing, and training for operational infrastructure associated with red team “attack platforms.” Conducts planning and executes red teaming, penetration testing, and or Capture the Flag events. Researches various cyber actor tactics, techniques, and procedures (TTP), organizational structures, capabilities, personas, and environments, and integrates findings into cyber red teaming or penetration test operations. Develop and utilize testing methodology for threat emulation and vulnerability validation. Provide expertise in TTP development for emulation of cyber adversaries. Develops and conducts training on information security, best practices, current tools, systems and applications.

Develops and conducts training on network intrusions, digital forensics, and basic and advance forensics examinations, including hands-on training.

9 | Contract # 47QTCA24D00CC

Labor Category: Cloud Project Manager

Years of Experience: 8 Years

Education: Master’s Degree

Experience: Possesses at least eight years of experience as a software engineer/network operator in programs and contracts of similar scope, type, and complexity. Master’s degree in computer science or related discipline from an accredited college or university is required with relevant certifications and experience. Possesses an appropriate security clearance required to conduct the work.

Duties: Directs and coordinates the integrated activities of cloud projects which are engaged in the planning and development, maintenance, reengineering, securing, or exploitation of cloud network systems. This includes directing, coordinating, and facilitating multiple development, reengineering, process improvement, and operational initiatives related to various cloud network systems. Provides strategic, expert advice and consultation on the design and implementation of various cloud projects. Supervises project staff and a variety of other functional area staff, as temporarily assigned to work with the project in question. Establishes and implements short- and long-range organizational goals, objectives, policies, and operating procedures; monitors and evaluates program effectiveness; effects changes required for improvement. Participates on and/or facilitates various committees and reengineering teams;

serves on the cloud project planning and policy-making committees. Designs and directs change management programs and activities to ensure smooth adoption of process and system changes. Interactively communicates with the client and keeps the client apprised of the progress of project initiatives. Proactively engages with internal teams and the client to identify and resolve potential and actual issues; identify, communicate, and implement appropriate solutions and resolutions to issues. Selects and directs the activities of consultants and subcontractors engaged in providing professional support to project activities. Develops integrated project plans, implementation schedules, and cost estimates for projects; prepares and manages project budgets and performs periodic cost and productivity analyses. Represents the project to various institutional divisions and components as well as to various external entities, as appropriate. Communicates regularly with executive management and administration regarding the status of current project initiatives; obtains executive guidance and approval as required to advance initiatives. Performs miscellaneous job-related duties as assigned by client.

Labor Category: Cloud Engineer III

Education: Bachelor’s Degree

Experience: Possesses at least five years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Bachelor’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Manages overall system-level support of a multi-user cloud operating system, hardware and software tools, including installation, configuration, maintenance and support of these systems. Collects information to analyze and evaluate existing or proposed cloud systems.

Aids in customizing, upgrading, integrating, and testing software for users. Installs, tests, maintains and supports operating system software and hardware. Troubleshoots and resolves hardware, software, and connectivity problems, including user access and component configuration. Documents projects and writes user instructions. Leads/manages

10 | Contract # 47QTCA24D00CC a team of IT Specialists to meet cloud program/network requirements. Leads data gathering, research, and analysis while conducting threat, vulnerability, risk, and maturity assessments.

Applies critical thinking, conducts gap analysis, develops and implements plans for the improvement of the risk management-related program and contribute to constant innovation and improvement. Performs vulnerability scans of network enclaves. Maintains knowledge of emerging threats, vulnerabilities, and intelligence within the cybersecurity field to ensure remediation against known threats. Assists with vulnerability remediation, as necessary.

Conducts analysis results to identify high risk vulnerabilities impacting the cloud network and ensure proper vulnerability management security postures. Performs and troubleshoots network and host vulnerability scanners. Maintains knowledge of applicable computer network defense (CND) policies, regulations, and compliance documents. Documents policies and procedures for the use of cloud vulnerability assessment tools and methodologies. Evaluates cyber security risks (external & internal threats, platform & application vulnerabilities, data protection, etc.), testing controls designed to mitigate risk, communicates issues and findings to management, devises solutions for business improvements, and follows up on corrective actions. Participates on and leads professional teams to execute technical audit projects focused on evaluating the effectiveness of cyber security governance, tools and operations, may evaluate the design, effectiveness, and efficiency of information technology and security processes, procedures, and technical controls including solution implementations, identifies and addresses systemic gaps in cloud cyber security risk management. Develops data analysis and applies leading edge and other automated tools to provide management with proper context of potential exposure to control weaknesses. Collaborate with product, engineering and security practitioners to measure the effectiveness of the secure software development lifecycle. Exploits common vulnerabilities and misconfigurations associated with operating systems, protocols and network security services, assists with procuring, managing, and training for operational infrastructure associated with red team “attack platforms.” Conducts planning and executes red teaming, penetration testing, and or Capture the Flag events. Researches various cyber actor tactics, techniques, and procedures (TTP), organizational structures, capabilities, personas, and environments, and integrates findings into cyber red teaming or penetration test operations.

Develop and utilize testing methodology for threat emulation and vulnerability validation.

Provide expertise in TTP development for emulation of cyber adversaries. Develops and conducts training on information security, best practices, current tools, systems and applications. Develops and conducts training on cloud network intrusions, digital forensics, and basic and advance forensics examinations, including hands-on training.

Labor Category: Cloud Engineer II

Years of Experience: 3 Years

Education: Bachelor’s Degree

Experience: Possesses at least three years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Master’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work..

Duties: Supports overall system-level support of a multi-user cloud operating system, hardware and software tools, including installation, configuration, maintenance and support of these systems. Collects information to analyze and evaluate existing or proposed cloud systems. Aids in customizing, upgrading, integrating, and testing software for users. Installs, tests, maintains and supports

11 | Contract # 47QTCA24D00CC operating system software and hardware. Troubleshoots and resolves hardware, software, and connectivity problems, including user access and component configuration. Documents projects and writes user instructions. Supports a team of IT Specialists to meet cloud program/network requirements. Supports data gathering, research, and analysis while conducting threat, vulnerability, risk, and maturity assessments. Applies critical thinking, conducts gap analysis, develops and implements plans for the improvement of the risk management-related program and contribute to constant innovation and improvement; may lead/manage a team of IT specialists. Performs vulnerability scans of network enclaves. Maintains knowledge of emerging threats, vulnerabilities, and intelligence within the cybersecurity field to ensure remediation against known threats. Assists with vulnerability remediation, as necessary. Conducts analysis results to identify high risk vulnerabilities impacting the network and ensure proper vulnerability management security postures.

Performs and troubleshoots network and host vulnerability scanners. Maintains knowledge of applicable computer network defense (CND) policies, regulations, and compliance documents.

Documents policies and procedures for the use of vulnerability assessment tools and methodologies.

Evaluates cyber security risks (external & internal threats, platform & application vulnerabilities, data protection, etc.), testing controls designed to mitigate risk, communicates issues and findings to management, devises solutions for business improvements, and follows up on corrective actions.

Participates on and leads professional teams to execute technical audit projects focused on evaluating the effectiveness of cyber security governance, tools and operations, may evaluate the design, effectiveness, and efficiency of information technology and security processes, procedures, and technical controls including solution implementations, identifies and addresses systemic gaps in cloud cyber security risk management. Develops data analysis and applies leading edge and other automated tools to provide management with proper context of potential exposure to control weaknesses. Collaborate with product, engineering and security practitioners to measure the effectiveness of the secure software development lifecycle. Exploits common vulnerabilities and misconfigurations associated with operating systems, protocols and network security services, assists with procuring, managing, and training for operational infrastructure associated with red team “attack platforms.” Conducts planning and executes red teaming, penetration testing, and or Capture the Flag events. Researches various cyber actor tactics, techniques, and procedures (TTP), organizational structures, capabilities, personas, and environments, and integrates findings into cyber red teaming or penetration test operations. Develop and utilize testing methodology for threat emulation and vulnerability validation. Provide expertise in TTP development for emulation of cyber adversaries. Develops and conducts training on information security, best practices, current tools, systems and applications. Develops and conducts training on cloud network intrusions, digital forensics, and basic and advance forensics examinations, including hands-on training.

Labor Category: Contracts Manager III

Education: Master’s Degree

Experience: Possesses at least five years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Master’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Provides expert contract and program administrative support to contracting officers, contract specialists, contracting officer representatives (COR), government program managers, leadership, and technical support staff. This includes supporting pipeline management, milestone schedule development, analysis, and management and acquisition strategy recommendations and research. Provides support for administrative contract file development, including conducting market research, acquisition planning and recommendations, constructing base contracts, contract

12 | Contract # 47QTCA24D00CC modifications, task/call/delivery orders, developing requests for information (RFI), business clearances, research and applying the Federal Acquisition Regulation and applicable agency supplements, developing independent government cost estimates (IGCEs), evaluation plans and quality assurance surveillance plans, developing requests for proposal (RFP), compiling vendor questions and answers, providing proposal and price analysis support, conducting complex supply chain analysis. Collaborates in teams across different competency groups within the acquisition process, including the acquisition office and program office, engineering, finance, legal departments, and external counterparties as applicable. May lead/manage a team of consultants to meet office/program requirements. Leads or supports the creation of project deliverables and conducts quality reviews.

Supports acquisition office and program office administrative and program management functions. Evaluates the organization, problems, and workflow analytically and systematically; and plans and develops appropriate corrective action. Applies business process improvement practices to reengineer methodologies/principles and business process modernization projects. Appropriately applies activity- and data-modeling, transaction flow analysis, internal control- and risk-analysis and modern business methods and performance measurement techniques. Constructs sound, logical business improvement opportunities consistent with management guiding principles and cost savings objectives.

Certifications:

• Specific professional certifications will be defined at the program office level on task orders so that requirements are tailored to technical program office needs.

• “Professional Certifications" may include, but are not limited to: Relevant career field DAWIA Level II or higher certifications, relevant FAC-C II certifications or higher, industry equivalents such as NCMA CPCM or CPFM, an MBA/Masters Degree focused in the relevant field, or demonstrated experience performing duties commensurate with these professional certifications.

• Specialized Experience" may include, but is not limited to: Demonstrated work experience with contract management and contract administration support for federal government procurement efforts. This includes specialized contracting methods such as price and cost analysis, IT agile contracting, major systems procurement, facilities procurement, or international procurement.

Labor Category: Contracts Specialist II

Years of Experience: 2 Years

Education: Bachelor’s Degree

Experience: Possesses at least two years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Bachelor’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Provides contract and program administrative support to contracting officers, contract specialists, contracting officer representatives (COR), government program managers, leadership, and technical support staff. This includes supporting pipeline management, milestone schedule development, analysis, and management and acquisition strategy recommendations and research. Provides support for administrative contract file development, including conducting market research, acquisition planning and recommendations, constructing base contracts, contract modifications, task/call/delivery orders, developing requests for information (RFI), business clearances, research and applying the Federal Acquisition Regulation and applicable agency supplements, developing independent government cost estimates (IGCEs), evaluation plans and quality assurance surveillance plans, developing requests for proposal (RFP), compiling vendor questions and

13 | Contract # 47QTCA24D00CC answers, providing proposal and price analysis support, conducting complex supply chain analysis. Collaborates in teams across different competency groups within the acquisition process, including the acquisition office and program office, engineering, finance, legal departments, and external counterparties as applicable. Supports acquisition office and program office administrative and program management functions. Evaluates the organization, problems, and workflow analytically and systematically; and plans and develops appropriate corrective action. Applies business process improvement practices to reengineer methodologies/principles and business process modernization projects.

Appropriately applies activity- and data-modeling, transaction flow analysis, internal control-and risk-analysis and modern business methods and performance measurement techniques.

Constructs sound, logical business improvement opportunities consistent with management guiding principles and cost savings objectives.

so that requirements are tailored to technical program office needs.

• "Professional Certifications" may include, but are not limited to: Relevant career field DAWIA Level I or higher certifications, relevant FAC-C I certifications or higher, industry equivalents such as NCMA CPCM, CPFM, or CCCM, a Bachelors Degree focused in the relevant field, or demonstrated experience performing duties commensurate with these professional certifications.

• "Specialized Experience" may include, but is not limited to: Demonstrated work experience with contract administration support for federal government procurement efforts. This includes specialized contracting methods such as price and cost analysis, IT agile contracting, major systems procurement, facilities procurement, or international procurement.

Labor Category: Financial Manager III

Education: Bachelor’s Degree

Experience: Possesses at least five years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Bachelor’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Provides expert financial and program administrative support to controllers, financial managers, government program managers, leadership, and technical support staff. Provides expert support in financial management processes and systems including implementation, operations, and recommendations for improvement. Supports the development of documentation and processes for financial planning, financial management, budget preparation, and audit work for financial or program offices. May lead/manage a team of consultants to meet client financial management requirements. Leads or supports the creation of project deliverables and conducts quality reviews.Evaluates the organization, problems, and workflow analytically and systematically; and plans and develops appropriate corrective action. Applies business process improvement practices to reengineer methodologies/principles and business process modernization projects. Appropriately applies activity- and data-modeling, transaction flow analysis, internal control- and risk-analysis and modern business methods and performance measurement techniques.

Constructs sound, logical business improvement opportunities consistent with management guiding principles and cost savings objectives.

•Specific professional certifications will be defined at the program office level on task orders so that requirements are tailored to technical program office needs.

14 | Contract # 47QTCA24D00CC

•"Professional Certifications" may include, but are not limited to: Relevant career field DAWIA Level II or higher certifications, industry equivalents such as AGA CGFM or a CPA, an MBA/Masters Degree focused in the relevant field, or demonstrated experience performing duties commensurate with these professional certifications.

•"Specialized Experience" may include, but is not limited to: Demonstrated work experience with financial management and audit support for federal government agencies. This includes specialized financial management experience with systems such as Delphi, PRISM, model-based custom financial systems, funds allocation management systems, or payment management and tracking systems.

Labor Category: Financial Analyst II

Years of Experience: 2 Years

Education: Bachelor’s Degree

Experience: Possesses at least two years of experience implementing and leading teams in IT projects and programs of similar scope, type, and complexity. Bachelor’s degree in computer science or related discipline from an accredited college or university is required. Possesses an appropriate security clearance required to conduct the work.

Duties: Provides financial and program administrative support to controllers, financial managers, government program managers, leadership, and technical support staff. Provides support in financial management processes and systems including implementation, operations, and recommendations for improvement. Supports the development of documentation and processes for financial planning, financial management, budget preparation, and audit work for financial or program offices.Evaluates the organization, problems, and workflow analytically and systematically; and plans and develops appropriate corrective action.

Applies business process improvement practices to reengineer methodologies/principles and business process modernization projects. Appropriately applies activity- and data-modeling, transaction flow analysis, internal control- and risk-analysis and modern business methods and performance measurement techniques. Constructs sound, logical business improvement opportunities consistent with management guiding principles and cost savings objectives.

so that requirements are tailored to technical program office needs.

• "Professional Certifications" may include, but are not limited to: Relevant career field DAWIA Level I or higher certifications, industry equivalents such as AGA CGFM or a CPA, a Bachelors Degree focused in the relevant field, or demonstrated experience performing duties commensurate with these professional certifications.

• "Specialized Experience" may include, but is not limited to: Demonstrated work experience with financial analysis and audit support for federal government agencies. This includes specialized financial management experience with systems such as Delphi, PRISM, model-based custom financial systems, funds allocation management systems, or payment management and tracking systems.

15 | Contract # 47QTCA24D00CC

Degree Substitutions Experience exceeding the minimum shown may be substituted for education.

Equivalent Degree Experience / Certifications Masters Bachelor’s degree plus specialized professional certifications and 2 years of additional specialized experience relevant to that particular role.

16 | Contract # 47QTCA24D00CC

ESCALATION of PRICING TABLE for

SIN SIN 54151S, SIN 518210C and SIN 541611.

EXOCYBER, INC.

Labor Rates and Annual Escalation rate of 4%

SIN Labor Category Year 1

July 10 – July9

Year 2 July 10 – July 9

Year 3 July 10 – July 9

Year 4 July 10 – July 9

Year 5 July 10 – July 9

54151S IT Program Manager $252.11 $262.20 $272.69 $283.60 $294.94 54151S Network Engineer III $226.04 $235.07 $244.47 $254.26 $264.42 54151S Network Engineer II $210.67 $219.09 $227.86 $236.98 $246.46 54151S Cloud Project Manager $249.57 $259.56 $269.93 $280.74 $291.97

518210C Cloud Engineer III $224.89 $233.88 $243.24 $252.98 $263.09 518210C Cloud Engineer II $209.59 $217.97 $226.69 $235.76 $245.19 541611 Contracts Manager III $252.12 $262.21 $272.70 $283.61 $294.95 541611 Contracts Specialist II $197.83 $205.74 $213.97 $222.53 $231.43 541611 Financial Manager III $226.85 $235.93 $245.37 $255.18 $265.39 541611 Financial Analyst II $196.87 $204.75 $212.94 $221.45 $230.31