MAS - Fortreum, LLC - 47QTCA24D00D5

GSA MAS Contract 47QTCA24D00D5

Fortreum LLC

General Services Administration

Federal Supply Schedule

Authorized Federal Schedule Supply Pricelist

Multiple Award Schedule

SIN 54151S – Information Technology Professional Services

SIN 54151HACS – Highly Adaptive Cybersecurity Services

SIN 518210C – Cloud Computing and Cloud Related IT Professional Services

SIN 541990RISK – Risk Assessment and Mitigation Services

Contract Number 47QTCA24D00D5 As of Refresh 21 dated June 2024

Information for Ordering Activities

1.0 Special Item Number

1.a Table of Awarded Special Item Number(s) with appropriate cross reference to item descriptions and awarded prices:

SINS SIN Titles SIN Sub Groups 518210C Cloud Computing and Cloud

Related IT Professional Services

541990RISK Risk Assessment and Mitigation Services

54151S Information Technology Professional Services

54151HACS Highly Adaptive Cybersecurity Services

High Value Assessments, Risk and Vulnerability Assessment, Cyber Hunt, Incident Response, Penetration Testing

1.b Lowest Unit Price: See pages 5-24

1.c Labor Category Descriptions: see pages 5-24

2.0 Maximum Order

The maximum order limitation under this schedule is $500,000.00.

3.0 Minimum Order

The minimum order under this schedule is $100.00

4.0 Geographic Coverage

The geographic coverage is Domestic only

5.0 Points of Production

19301 Winmeade Dr., Suite 250 Leesburg, VA 20176

6.0 Discounts from List Prices or Statement of Net Price:

Prices shown are net. Basic discounts have been deducted and the Industrial Funding Fee has been added.

7.0 Quantity Discounts

1% off orders over $300,000.00

8.0 Prompt Payment Terms

Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement for other concessions

1% net 15, net 30

9.0 Government Purchase Cards

Government Purchase cards are not accepted.

Government Purchase cards are not accepted above the micro purchase threshold.

10.0 Foreign Items

None

11.0 Delivery

a. Time of Delivery: Specified at the task order

b. Expedited Delivery: Contact Contractor

c. Overnight and 2-day Delivery: Contract Contractor

d. Urgent Requirements: Contact Contractor

12.0 FOB Points

Prices under this schedule are Free on Board (FOB) Destination

13.0 Ordering

a. Ordering Address: 19301 Winmeade Dr., Suite 250, Leesburg, VA 20176

b. Ordering Procedures: For supplies and services, the ordering procedures and information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405- 3

14.0 Payment Address

19301 Winmeade Dr., Suite 250, Lansdowne, VA 20176

15.0 Warranty Provision

None

16.0 Export Packing Charges (if applicable)

Not Applicable

17.0 Terms and Conditions of Government Purchase Card Acceptance

18.0 Terms and Conditions of Rental, Maintenance and Repair (if applicable)

19.0 Terms and Conditions of Installation (if applicable)

20.0 Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices

a. For Other Services: None

21.0 List Services and Distribution Points

22.0 List of Participating Dealers

Not applicable

23.0 Preventive Maintenance

24.0 Special Attributes

a. Environmental Attributes: Not Applicable

b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/

25.0 UEID

ZRZLZA93V1K3

26.0 Cage Code

Fortreum, LLC is registered in the System for Award Management (SAM.gov) Cage code 8P3J7.

Fortreum GSA Price List

GSA SIN LABOR CATEGORY

7/25/2024

7/24/2025

7/25/2025

7/24/2026

7/25/2026

7/24/2027

7/25/2027

7/24/2028

7/25/2028

7/24/2029 518210C Cloud Data Security Analyst I $99.59 $102.83 $106.18 $109.62 $113.19 518210C Cloud Security Specialist I $116.81 $120.61 $124.53 $128.58 $132.77 518210C Cloud Security Specialist III $178.30 $184.10 $190.09 $196.26 $202.64 541990RISK Risk Analyst I $81.11 $83.75 $86.47 $89.28 $92.18 541990RISK Risk Analyst II $91.37 $94.35 $97.41 $100.57 $103.84 541990RISK Risk Analyst III $100.93 $104.20 $107.59 $111.08 $114.69 541990RISK Risk Consultant I $118.96 $122.82 $126.81 $130.93 $135.18 541990RISK Risk Consultant III $148.68 $153.52 $158.51 $163.66 $168.98 541990RISK Sr Risk Consultant I $168.77 $174.25 $179.91 $185.75 $191.79 541990RISK Sr Risk Consultant II $183.51 $189.47 $195.63 $201.98 $208.55 541990RISK Sr Risk Consultant III $202.52 $209.10 $215.89 $222.90 $230.15 541990RISK Risk Project Manager $138.73 $143.23 $147.89 $152.70 $157.66 541990RISK Risk Manager I $157.93 $163.06 $168.36 $173.83 $179.49 541990RISK Risk Manager II $226.67 $234.05 $241.65 $249.50 $257.61 541990RISK Jr. Risk Technical Tester I $81.86 $84.52 $87.27 $90.12 $93.05 541990RISK Risk Technical Tester II $135.05 $139.44 $143.97 $148.64 $153.47 54151S Security Analyst I $81.11 $83.75 $86.47 $89.28 $92.18 54151S Security Analyst II $91.37 $94.35 $97.41 $100.57 $103.84 54151S Security Analyst III $100.93 $104.20 $107.59 $111.08 $114.69 54151S Security Consultant I $118.96 $122.82 $126.81 $130.93 $135.18 http://www.section508.gov/

GSA SIN LABOR CATEGORY

7/25/2024

7/24/2025

7/25/2025

7/24/2026

7/25/2026

7/24/2027

7/25/2027

7/24/2028

7/25/2028

7/24/2029 54151S Security Consultant III $202.52 $209.10 $215.89 $222.90 $230.15 54151S Sr. Security Consultant I $168.77 $174.25 $179.91 $185.75 $191.79 54151S Sr. Security Consultant II $183.51 $189.47 $195.63 $201.98 $208.55 54151S Sr. Security Consultant III $202.52 $209.10 $215.89 $222.90 $230.15 54151HACS Jr. Penetration Tester I $81.86 $84.52 $87.27 $90.12 $93.05 54151HACS Jr. Penetration Tester II $91.63 $94.61 $97.68 $100.86 $104.13 54151HACS Penetration Tester I $120.58 $124.50 $128.55 $132.74 $137.05 54151HACS Penetration Tester II $135.05 $139.44 $143.97 $148.64 $153.47 54151HACS Penetration Tester III $149.56 $154.42 $159.44 $164.61 $169.96 54151HACS Sr. Penetration Tester II $183.31 $189.27 $195.43 $201.77 $208.33 54151HACS HACS Project Manager $138.73 $143.23 $147.89 $152.70 $157.66 54151S Project Manager $138.73 $143.23 $147.89 $152.70 $157.66 54151S Program Manager $192.92 $199.19 $205.67 $212.35 $219.25 54151S Manager I $157.93 $163.06 $168.36 $173.83 $179.49 54151S Manager II $226.67 $234.05 $241.65 $249.50 $257.61

SIN 518210C – Cloud Computing and Cloud related IT Professional Services Cloud Data Security Analyst I: Works closely with senior members of the team supporting one or all of the following work activities: Cloud Audit preparation/execution, Cloud Consultative advisory support, Cloud Security Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, and Continuous professional development in pursuing industry specific certifications.

Minimum Education: Associates Minimum Years of Experience: 6 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD. Certification for 2 years of experience (Microsoft Cloud Certifications, Amazon Web Services Certifications, Google Cloud Certifications)

Cloud Security Specialist I: Works closely with senior members of the team supporting one or all of the following work activities: Cloud Audit preparation/execution, Cloud Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on Cloud control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Regularly conducts assessment or advisory activities for all Cloud control families, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on Cloud compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects in coordination with project manager to achieve delivery utilization targets.

Minimum Education: Associates Minimum Years of Experience: 3 Substitution: 4 years of work experience equals BA/BS, Certification for 2 years of experience (Microsoft Cloud Certifications, Amazon Web Services Certifications, Google Cloud Certifications)

Cloud Security Specialist III: Works closely with all members of the team supporting one or all of the following work activities: Cloud Audit preparation/execution, Cloud Consultative advisory support, Cloud Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on Cloud control families, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on Cloud compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations

Minimum Education: Bachelors Minimum Years of Experience: 7 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD. Certification equals 2 years of experience (Microsoft Cloud Certifications, Amazon Web Services Certifications, Google Cloud Certifications)

SIN 541990RISK – Risk Assessment and Mitigation Services

Risk Analyst I: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications

Minimum Education: Bachelors Minimum Years of Experience: 0 Substitution: 4 years of work experience equals BA/BS. Certification Cyber Security Analyst + equals 2 years work experience.

Risk Analyst II: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 1 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters.

Certification Cyber Security Analyst+ equals 2 years work experience.

Risk Analyst III: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 2 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters.

Certification Cyber Security Analyst+ equals 2 years work experience.

Risk Consultant I: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Regularly conducts assessment or advisory activities for all control families, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects in coordination with project manager to achieve delivery utilization targets.

Minimum Education: Bachelors Minimum Years of Experience: 2 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Risk Consultant III: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Understands concepts, principles, structure and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and controls to enforce levels of confidentiality, integrity and availability, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Regularly conducts assessment or advisory activities for all control families, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects in coordination with project manager to achieve delivery utilization targets

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Sr Risk Consultant I: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Sr Risk Consultant II: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Education: Bachelors Minimum Years of Experience: 5 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Sr Risk Consultant III: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Education: Bachelors Minimum Years of Experience: 6 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Risk Project Manager: Is the Central point of contact (POC) for clients. Works closely with members of the team supporting specific work activities: Leads and manages large/complex engagements in their entirety from project kickoff to delivery of report and readout, Coordinates scheduling across various support teams within Fortreum, Reviews final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Ensures projects and deliverables are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 5 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters.

Risk Manager I: Central POC for Technical POC of client. Works closely with members of the team supporting specific work activities: Resolves client and project issues/blockers and engages management when necessary for support, Mentors and trains members of the team on tactics, techniques, and procedures, Prepares final deliverables for delivery to customers within established timelines, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Builds upon foundational testing techniques to support other members on the team, Ensures projects and deliverables are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Risk Manager II: Central POC for Technical POC of client. Works closely with members of the team supporting specific work activities: Leads and manages large/complex engagements in their entirety from project kickoff to delivery of report and readout, Resolves client and project issues/blockers and engages management when necessary for support, Mentors and trains members of the team on tactics, techniques, and procedures, Advises clients on details of vulnerabilities, remediation strategies, and compliance requirements, Prepares final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Builds upon foundational testing techniques to support other members on the team, Ensures projects and deliverables are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 7 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Jr. Risk Technical Tester I: Works closely with senior members of the team learning and supporting any of the following work activities; External Network Penetration Testing, External Network Vulnerability Assessments, Endpoint/Workstation Reviews and Compromise Testing, Maintains scanning, testing, and other related artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Establishes a consistent writing style and approach to document vulnerabilities and findings, Builds upon foundational testing techniques (listed above) to support senior members on the team, Ensures projects are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Associates Minimum Years of Experience: 0 Substitution: 4 years of work experience equals BA/BS. Certified Ethical Hacker Certification equals 2 years work experience

Risk Technical Tester II: Works closely with senior members of the team supporting any of the following work activities: External & Internal Network Penetration Testing, External & Internal Network Vulnerability Assessments, Web Application Penetration Testing (Moderate to Complex), Web Application Vulnerability Assessments, API Penetration Testing (Simple), Endpoint/Workstation Reviews and Compromise Testing, Social Engineering: Phishing & Vishing, Proficient in at least one or more scripting languages (e.g., Bash, Python, PowerShell, Ruby), Prepares final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Maintains scanning, testing, and other related artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, vulnerabilities, and findings, Builds upon foundational testing techniques (listed above) to support other members on the team, Ensures projects and deliverables are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 3 Substitution: 4 years of work experience equals BA/BS. Certified Ethical Hacker Certification equals 2 years work experience

SIN 54151S – Information Technology Professional Services Security Analyst I: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications

Minimum Education: Bachelors Minimum Years of Experience: 0 Substitution: 4 years of work experience equals BA/BS. Certification Cyber Security Analyst+ equal 2 years work experience

Security Analyst II: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 1 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, Certification Cyber Security Analyst + equals 2 years work experience

Security Analyst III: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 2 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Security Consultant I: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Regularly conducts assessment or advisory activities for all control families, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects in coordination with project manager to achieve delivery utilization targets.

Minimum Education: Bachelors Minimum Years of Experience: 2 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Security Consultant III: Works closely with senior members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Understands concepts, principles, structure and standards used to design, implement, monitor and secure operating systems, equipment, networks, applications and controls to enforce levels of confidentiality, integrity and availability, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Regularly conducts assessment or advisory activities for all control families, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects in coordination with project manager to achieve delivery utilization targets

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Sr Security Consultant I: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Captures data and notes of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters

Sr Security Consultant II: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Years of Experience: 5

Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Sr Security Consultant III: Works closely with all members of the team supporting one or all of the following work activities: Audit preparation/execution, Consultative advisory support, Documentation review and analysis, Records meeting minutes and maintains work papers, Data and note capturing of customer interviews/working sessions, Establishes a consistent writing style and approach to conducting assessments or developing documentation, Builds interviewing techniques to support senior members on the team, Regularly conducts project activities on the easier control requirements, Collaborates with delivery team members to drive customer satisfaction and meet project deliverables, Ensures quality products and services are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with clients and stakeholders, Continuous professional development in pursuing industry specific certifications, Maintains a consistent writing style and approach to conducting assessments or developing documentation, Consistently works to improve interviewing techniques to establish efficiencies in gathering required information, Prepares and self-reviews and/or peer reviews deliverables, Advises clients on compliance activities and their desired outcomes, Manages priorities, tasks, and assigned hours on projects to achieve delivery utilization targets, Leads project activities including preparation, review of documentation and artifacts, evaluation of procedures, and client interviews, Prepares, reviews and approves deliverables, Escalates client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue, Provides mentorship to team members, Interfaces with clients through entire engagement, interacting with all levels of client organizations.

Minimum Education: Bachelors Minimum Years of Experience: 6 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Project Manager: Is the Central POC for clients. Works closely with members of the team supporting specific work activities: Leads and manages large/complex engagements in their entirety from project kickoff to delivery of report and readout, Coordinates scheduling across various support teams within Fortreum, Reviews final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Ensures projects and deliverables are delivered on time and within allotted hours, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 5 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Program Manager: Central POC for client across multiple contracts/projects. Supports the following work activities: Sales efforts to including determining level of effort for future engagements, scoping, and identifying new opportunities for line of business, Manage 5 to 7 (~2M+ revenue) direct reports with the responsibility to mold and professionally grow each report, Works closely with members of the team supporting specific work activities: Leads and manages large/complex engagements in their entirety from project kickoff to delivery of report and readout, Resolves client and project issues/blockers and engages management when necessary for support, Mentors and trains members of the team on tactics, techniques, and procedures, Prepares final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Demonstrates a consistent writing style and approach to document reports, Ensures projects and deliverables are delivered on time and within allotted budgets, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders

Minimum Education: Bachelors Minimum Years of Experience: 7 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Manager I: Central POC for Technical POC of client. Works closely with members of the team supporting specific work activities: Resolves client and project issues/blockers and engages management when necessary for support, Mentors and trains members of the team on tactics, techniques, and procedures, Prepares final deliverables for delivery to customers within established timelines, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Builds upon foundational testing techniques to support other members on the team, Ensures projects and deliverables are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Education: Bachelors Minimum Years of Experience: 4 Substitution: 4 years of work experience equals BA/BS, 6 years work experience equals Masters, 8 years work experience equals PHD

Manager II: Central POC for Technical POC of client. Works closely with members of the team supporting specific work activities: Leads and manages large/complex engagements in their entirety from project kickoff to delivery of report and readout, Resolves client and project issues/blockers and engages management when necessary for support, Mentors and trains members of the team on tactics, techniques, and procedures, Advises clients on details of vulnerabilities, remediation strategies, and compliance requirements, Prepares final deliverables for delivery to customers within established timelines, Communicates with customers (at all levels) on project kickoff and debrief calls, Maintains artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Coordinates project readiness (i.e., validation of credentials and access), Demonstrates a consistent writing style and approach to document reports, Builds upon foundational testing techniques to support other members on the team, Ensures projects and deliverables are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders, Continuous professional development in pursuing industry specific certifications.

Minimum Years of Experience: 7

SIN 54151HACS – Highly Adaptive Cybersecurity Services Jr. Penetration Tester I: Works closely with senior members of the team learning and supporting any of the following work activities; External Network Penetration Testing, External Network Vulnerability Assessments, Endpoint/Workstation Reviews and Compromise Testing, Maintains scanning, testing, and other related artifacts and evidence in accordance to policy, Performs work in accordance with documented processes and procedures, Establishes a consistent writing style and approach to document vulnerabilities and findings, Builds upon foundational testing techniques (listed above) to support senior members on the team, Ensures projects are delivered on time and within allotted hours, Ensures timesheets are accurate and completed on time, Establishes and maintains positive collaborative relationships with team, clients, and stakeholders,…