MAS - NR Labs LLC - 47QTCA24D00D0

Contractor:

NR LABS LLC

Contract Number:

47QTCA24D00D0

Page | 1

General Services Administration

Federal Supply Service

Authorized Federal Supply Schedule Price List On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!®, a menu-driven database system. The INTERNET address for GSA Advantage!® is http://www.gsaadvantage.gov

Schedule: Multiple Award Schedule (MAS)

Category: Information Technology Class: DA01 / DJ01

Contract #: 47QTCA24D00D0

For more information on ordering from Federal Supply Schedules go to the GSA Schedules page at GSA.gov

UEI: UKGNCP8JLNE7

1775 Tysons BLVD FL 5

Mc Lean, Virginia 22102-4285

Contract Administrator:

Ryan Tappis, Managing Director

Phone: 240-338-0256

Email: ryan.tappis@nrlabs.com

Contract Period: July 24, 2024 through July 23, 2029

Pricelist current through Modification #: PS-0005 Effective 01/28/25 mailto:ryan.tappis@nrlabs.com

Page | 2

GSA Awarded Terms and Conditions

1a. TABLE OF AWARDED SPECIAL ITEM NUMBERS (SINS) SIN Title 54151S IT Professional Services 54151HACS Highly Adaptive Cybersecurity Services (HACS) OLM Order Level Materials

1b. LOWEST PRICED MODEL NUMBER AND PRICE FOR EACH SIN

See attached Price List.

1c. HOURLY RATES (Services Only)

See attached Price List.

2. MAXIMUM ORDER

SIN 54151S: $500,000

SIN 54151HACS: $500,000

SIN OLM: $250,000

3. MINIMUM ORDER

$100.00

4. GEOGRAPHIC COVERAGE

Domestic Only

5. POINT OF PRODUCTION

United States

6. DISCOUNT FROM LIST PRICES

Net GSA pricing is listed in attached Price List. Basic discounts have been deducted.

7. QUANTITY/VOLUME DISCOUNTS

None

8. PROMPT PAYMENT TERMS

Net Thirty (30) Days

9. FOREIGN ITEMS

None

Page | 3

10a. TIME OF DELIVERY To be Determined by Task

10b. EXPEDITED DELIVERY To be Determined by Task

10c. OVERNIGHT AND 2-DAY DELIVERY Please contact contractor for overnight and 2-day delivery.

10d. URGENT REQUIREMENTS When the Federal Supply Schedule contract delivery period does not meet the bona fide urgent delivery requirements of an ordering activity, ordering activities are encouraged, if time permits, to contact the Contractor for the purpose of obtaining accelerated delivery. The Contractor shall reply to the inquiry within 3 workdays after receipt. (Telephonic replies shall be confirmed by the Contractor in writing.) If the Contractor offers an accelerated delivery time acceptable to the ordering activity, any order(s) placed pursuant to the agreed upon accelerated delivery time frame shall be delivered within this shorter delivery time and in accordance with all other terms and conditions of the contract.

11. F.O.B. POINT

Destination

12a. ORDERING ADDRESS 1775 Tysons BLVD FL 5 Mc Lean, Virginia 22102-4285

12b. ORDERING PROCEDURES For supplies and services, the ordering procedures, information on Blanket Purchase

Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. PAYMENT ADDRESS

1775 Tysons BLVD FL 5 Mc Lean, Virginia 22102-4285

14. WARRANTY PROVISION

No Warranty Policy for Services

15. EXPORT PACKING CHARGES

N/A

Page | 4

16. TERMS AND CONDITIONS OF RENTAL, MAINTENANCE, AND REPAIR

17. TERMS AND CONDITIONS OF INSTALLATION

N/A

18a. TERMS AND CONDITIONS OF REPAIR PARTS INDICATING DATE OF PARTS PRICE LISTS AND

ANY DISCOUNTS FROM LIST PRICES

18b. TERMS AND CONDITIONS FOR ANY OTHER SERVICES

19. LIST OF SERVICE AND DISTRIBUTION POINTS

N/A

20. LIST OF PARTICIPATING DEALERS

N/A

21. PREVENTIVE MAINTENANCE

N/A

22a. SPECIAL ATTRIBUTES SUCH AS ENVIRONMENTAL ATTRIBUTES (E.G., RECYCLED CONTENT, ENERGY EFFICIENCY, AND/OR REDUCED POLLUTANTS)

22b. SECTION 508 COMPLIANCE

If applicable, Section 508 compliance information on the supplies and services in this contract are available in Electronic and Information Technology (EIT) at the following: N/A. The EIT standard can be found at: www.Section508.gov/.

23. UNIQUE ENTITY IDENTIFIER (UEI)

KPJBLAXTF9J8

24. NOTIFICATION REGARDING REGISTRATION IN SYSTEM FOR AWARD MANAGEMENT (SAM)

WEBSITE

Active http://www.section508.gov/

Page | 5

Approved MAS Prices All Prices Include the Industrial Funding Fee (IFF)

SIN Labor Category

Year 1

GSA Price Including

IFF

Year 2 GSA Price Including

IFF

Year 3 GSA Price Including

IFF

Year 4 GSA Price Including

IFF

Year 5

GSA

Price

Including

IFF

54151S Information Engineer $98.32 $100.28 $102.29 $104.33 $106.42

54151S Information Security Analyst I $69.53 $70.92 $72.34 $73.79 $75.26

54151S Information Security Analyst II $93.80 $95.68 $97.59 $99.55 $101.54

54151S Information Security Analyst III $126.94 $129.48 $132.07 $134.71 $137.40

54151S IT Program Manager $142.84 $145.70 $148.61 $151.59 $154.62

54151S Network Engineer I $69.72 $71.11 $72.53 $73.98 $75.47

54151S Network Engineer II $82.57 $84.22 $85.90 $87.63 $89.38

54151S Senior Compliance Analyst $117.48 $119.83 $122.23 $124.68 $127.16

54151S Senior Principal Information Engineer $138.24 $141.00 $143.82 $146.69 $149.62

54151S Subject Matter Expert $122.99 $125.45 $127.96 $130.52 $133.13

54151S IT Program Information Analyst $110.53 $112.74 $114.99 $117.29 $119.64

54151HACS Cybersecurity Program Manager $142.84 $145.70 $148.61 $151.59 $154.62

54151HACS Cybersecurity Senior Principal Information Engineer $138.24 $141.00 $143.82 $146.69 $149.62

54151HACS Cybersecurity Functional Specialist/Expert II $136.79 $139.53 $142.32 $145.17 $148.07

54151HACS Cybersecurity Program Information Analyst $110.53 $112.74 $114.99 $117.29 $119.64

54151HACS Cybersecurity Information Engineer $98.32 $100.28 $102.29 $104.33 $106.42

54151HACS Cybersecurity Junior Security Specialist $61.41 $62.64 $63.89 $65.17 $66.47

54151HACS Cybersecurity Security Specialist SME $157.11 $160.25 $163.46 $166.72 $170.06

54151HACS Senior Cybersecurity Engineer and Penetration Tester $228.51 $233.09 $237.75 $242.51 $247.36

Page | 6

Labor Category Descriptions

Labor Category Functional Responsibility

Minimum Education Experience

Minimum Years’

Experience Information

Engineer The Information Engineer plays a critical role in designing and implementing information systems that support enterprise-level data management, integration, and analysis. This role demands a high level of expertise in data architecture and software development, focusing on optimizing data flows and storage to meet organizational needs.

Bachelors 4

Information Security Analyst I

Analyzes and defines security requirements for information protection. Defines and develops security policies. Designs, develops, engineers, and implements solutions that meet network, system, or application security requirements. Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow. Must demonstrate the ability to work independently or under only general direction.

Bachelors 3

Information Security Analyst II

Analyzes and defines security requirements for information protection. Defines and develops security policies. Designs, develops, engineers, and implements solutions that meet network, system, or application security requirements. Gathers and organizes technical information about an organization’s mission goals and needs, existing security products, and ongoing needs.

Analyzes the sensitivity of information and performs vulnerability and risk assessments on the basis of defined sensitivity and information flow. Must demonstrate the ability to work independently or under only general direction.

Bachelors 5

Information Security

Analyst III

The role of an Information Security Analyst III involves advanced analysis and definition of security requirements for information protection. This senior-level professional not only defines and refines security policies but also leads in the design, development, engineering, and implementation of comprehensive solutions that meet sophisticated network, system, or application security requirements. They proactively gather and organize technical information about an organization's mission goals, needs, and the current security infrastructure, taking a strategic approach to long-term security needs. The position requires conducting in-depth analyses of information sensitivity, performing detailed vulnerability and risk assessments based on the defined sensitivity and information flow. An Information Security Analyst III is expected to work independently with minimal supervision, demonstrating a high level of autonomy and leadership in managing complex security projects and initiatives.

Bachelors 7

IT Program Manager

The IT Program Manager is responsible for overseeing and coordinating the information technology projects and initiatives across the organization. This role involves strategic planning, project management, and execution to ensure that IT programs

Bachelors 9

Page | 7

Category Functional Responsibility

Minimum Education Experience

Minimum Years’

Experience align with the business objectives and are delivered within scope, time, and budget constraints.

Network Engineer I

Under general supervision, oversees the purchase, installation, and support of network communications, including LAN/WAN systems.

Works on problems of diverse scope where analysis of situation requires evaluation and judgment. Responsible for evaluating current systems. Assists in the planning of large-scale systems projects through vendor comparison and cost studies. Requires thorough knowledge of LAN/WAN systems, networks, and applications.

Bachelors 2

Network Engineer II

Under general direction, manages the purchase, installation, and support of network communications, including LAN/WAN systems.

Responsible for evaluating current systems. Works on complex problems where analysis of situation requires in-depth evaluation of various factors. Plans large-scale systems projects through vendor comparison and cost studies. Provides work leadership and training

Bachelors 4

Senior Compliance

Analyst

Responsible for coordinating, defining, staffing, and managing one or multiple projects. The Principal Consultant works across the business, IS management, Quality Assurance and Testing, Systems Analyst, Software Development, and Technical Writing teams to ensure the delivery of a high quality software application. Primary technical point of contact with Program Manager and various technical personnel on project. Develops project schedules, coordinates project status meetings, manages resources in all phases of software development lifecycle. Works with the project business owner to oversee delivery performance, ensure delivery quality and report schedule, cost, and execution performance.

Bachelors 5

Senior Principal

Information Engineer

The Principal Information Engineer is a senior-level position responsible for leading the design and implementation of sophisticated information systems that support critical business processes and data management across the organization. This role requires a strategic thinker with extensive experience in data architecture, systems integration, and management.

Bachelors 8

Subject Matter Expert

The individual collaborates closely with client management to comprehend their requirements, strategic goals, and overarching strategies related to IT. They carefully assess customer needs and provide recommendations for IT acquisitions. By partnering with customers, they assist in developing long-range strategic plans and help refine these strategies. Additionally, they offer guidance on the implications of recent and pending legislation and how new technologies could impact both users and management. This professional is also recognized for their exceptional oral and written communication skills. Their expertise and reputation in their technical or specialty area have earned them recognition as an "expert" within the professional community.

Bachelors 5

Page | 8

Category Functional Responsibility

Minimum Education Experience

Minimum Years’

Experience IT Program Information

Analyst

The Program Information Analyst is responsible for the collection, analysis, and dissemination of program-specific data to facilitate strategic IT planning, performance measurement, and operational efficiency within technological frameworks. This role involves leveraging advanced data analytics and information management systems to work closely with program managers and IT stakeholders, ensuring data integrity through rigorous validation processes. The analyst provides actionable insights into program performance by interpreting complex data sets and utilizing IT tools such as SQL databases, data visualization software, and BI tools to enhance data-driven decision-making. They also recommend IT-driven improvements and innovations based on thorough analytical findings and trends observed within the program’s technological ecosystem.

Bachelors 5

Cybersecurity Program Manager

Responsible for overseeing and coordinating the information technology projects and initiatives across the organization. This role involves strategic planning, project management, and execution to ensure that IT programs align with the business objectives and are delivered within scope, time, and budget constraints. This role also involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Bachelors 9

Cybersecurity Senior

Principal Information

Engineer

A senior-level position responsible for leading the design and implementation of sophisticated information systems that support critical business processes and data management across the organization. This role requires a strategic thinker with extensive experience in data architecture, systems integration, and management. This role also involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Bachelors 8

Cybersecurity Functional

Specialist/Exp ert II

A senior-level professional in the field of cybersecurity, responsible for advising and enhancing the security measures within an organization. This role requires a deeper understanding of cybersecurity concepts and practices, as well as experience in applying these skills to protect the organization's assets and data.

The Functional Specialist/Expert II assists in the development and implementation of comprehensive security strategies, policies, and procedures that align with organizational goals and regulatory requirements. They also conduct risk assessments to identify potential security threats and vulnerabilities and evaluate and recommend appropriate security measures to mitigate risks and protect critical systems and data. They may also have responsibilities for overseeing daily security operations, including monitoring security systems, managing alerts, and responding to incidents. This role involves working closely with security tools and technologies to detect and address potential threats. This role also

Bachelors 8

Page | 9

Category Functional Responsibility

Minimum Education Experience

Minimum Years’

Experience involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Cybersecurity Program

Information Analyst

Responsible for the collection, analysis, and dissemination of program-specific data to facilitate strategic IT planning, performance measurement, and operational efficiency within technological frameworks. This role involves leveraging advanced data analytics and information management systems to work closely with program managers and IT stakeholders, ensuring data integrity through rigorous validation processes. The analyst provides actionable insights into program performance by interpreting complex data sets and utilizing IT tools such as SQL databases, data visualization software, and BI tools to enhance data driven decision-making. They also recommend IT-driven improvements and innovations based on thorough analytical findings and trends observed within the program’s technological ecosystem. This role also involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Bachelors 5

Cybersecurity Information

Engineer

Plays a critical role in designing and implementing information systems that support enterprise-level data management, integration, and analysis. This role demands a high level of expertise in data architecture and software development, focusing on optimizing data flows and storage to meet organizational needs.

This role also involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Bachelors 4

Cybersecurity Junior Security

Specialist

An entry-level position in the field of cybersecurity. The role primarily involves assisting in protecting an organization's digital assets and information systems from cyber threats. The specialist continuously monitors security systems, networks, and applications to detect and respond to potential security breaches or vulnerabilities. They also assist in the investigation of security incidents, conducting basic forensic analysis, helping to mitigate the impact of any security breaches and perform threat analysis activities. This includes analyzing security data to identify trends, patterns, and potential threats and may involve using security tools and software to scan for vulnerabilities. They also create and maintain records of security incidents, investigations, and outcomes and prepare reports for senior management and stakeholders as required. This role also involves ensuring the security of information systems, implementing cybersecurity measures, identifying vulnerabilities, and responding to security incidents to protect organizational assets.

Bachelors 1

Page | 10

Category Functional Responsibility

Minimum Education Experience

Minimum Years’

Experience Cybersecurity

Security Specialist SME

Provides Cybersecurity thought leadership in areas such as Governance, Risk, and Compliance, Security and Network Engineering, Cloud Security, and Security Operations. Provides minimally supervised support for difficult analysis and evaluation assignments. Has the ability to provide analysis and consulting to management level personnel. Performs analysis and evaluation of existing or proposed processes, applications, systems, security, or software. Performs, and/or may direct, project planning, scope, control, management, tracking, or review. May perform functional requirements gathering for projects. Performs analysis and evaluation throughout the process, application, system, or software development life cycle which includes, but is not limited to planning, requirements, design, acquisition, development, integration, installation/deployment, performance tuning, testing, or training. Performs, or may direct, document development/preparation at various stages of a project life cycle (e.g., planning through implementation) to detail analysis results and solution recommendations. Facilitates meetings such as joint application development (JAD) sessions to support the analysis process. Serves as a liaison between functional and technical specialists. Assists with testing to support the project life cycle, as applicable. Uses methodologies, modeling/estimating techniques, tools, applications, systems, software, or databases at advanced levels to perform assigned tasks.

Bachelors 10

Senior Cybersecurity Engineer and Penetration

Tester

This role involves performing cybersecurity engineering, penetration testing, and operational tasks to ensure the security and integrity of systems and data. Responsibilities include designing and implementing secure system architectures, conducting vulnerability assessments, and executing simulated attack scenarios to identify weaknesses in client systems. The role requires advanced testing techniques, vulnerability scanning, and network enumeration to uncover flaws, misconfigurations, and exploitable resources while prioritizing vulnerabilities based on severity and impact. Collaborating with development and IT teams, the role supports vulnerability remediation through solutions such as patch management, configuration changes, and secure coding practices, verifying their effectiveness through follow-up testing and system re-assessments. Comprehensive documentation and actionable recommendations are provided to strengthen defenses, enhance compliance with security standards, and drive continuous improvement in organizational security postures.

Bachelors 12

The Service Contract Labor Standards (SCLS) is applicable to this contract as it applies to the entire MAS and all services provided. While no specific labor categories have been identified as being subject to SCLS due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS eligible labor categories. If and / or when the contractor adds SCLS labor categories / employees to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS matrix identifying the GSA labor category titles, the occupational code, SCLS labor category titles